"Ghost  Servers’  Haunt  Your  Bottom  Line.  Find  out  if  you’re  still  paying  for 
forgotten  pieces  of  IT  equipment  that  sit  there  like  electronic  zombies,  page  32 
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Introducing  the  software-based 
VoIP  solution  from  Microsoft.  It's  a 
whole  new  way  to  look  at  telephony. 

As  it  turns  out,  that  important 
move  to  VoIP  isn't  about  ripping  and 
replacing  or  big,  upfront  costs.  That's 
because  it's  no  longer  about  hardware. 

It's  actually  about  software. 

That's  right.  Keep  your  hardware — 
your  PBX,  your  gateways,  even  your 
phones.  Add  software.  Software  that 
integrates  with  Active  Directory,® 
Microsoft®  Office,  Microsoft  Exchange 
Server,  and  your  PBX.  Simply  maximize 
your  current  PBX  investment  and  make 
it  part  of  your  new  software-based 
VoIP  solution. 

Because  what  you  have  is  good. 
What  you  have  with  the  right 
software  is  even  better.  Learn  more 
at  microsoft.com/voip 

Your  potential.  Our  passion.  " 

Microsoft 
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the  goal  of  surveillance  is  to  deter¬ 
mine  whether  a  person  is  thinking 
things  he  shouldn’t  be  thinking. 
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22  Big  Brother 
Really  Is  Watching 


COVER  STORY:  Homeland  Security’s  Project  Hostile  Intent 
aims  to  use  behavioral  profiling  technology  to  catch  ter¬ 
rorists  before  they  strike.  But  getting  it  to  work  could  be  a 
challenge  -  and  then  there  are  those  pesky  ethical  issues. 


28  8  Technologies 
To  Master  for  ’08 


Here  are  some  areas  you’ll 
need  to  become  very  familiar 
with  to  keep  ahead  of  the  eight 
ball  in  the  year  ahead. 

32  ‘Ghost 
Servers’  That 
Haunt  Your 
Bottom  Line 


Unproductive  and 
undocumented 
servers  take  up  valuable 

real  estate,  consume  increasingly  expensive  electricity 
and,  in  some  cases,  require  ongoing  maintenance  and 
lease  payments.  Here’s  how  to  lay  them  to  rest. 
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Powered  by  the  Quad-:Core  Inte^  Xeon*  Procea^ 


Get  down  to  the  smallest  details.  Visit  hp.com/go/nocompromise57 
1-866-625-0808 
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Powerful. 

Efficient. 


Alternative  Thinking  About  The  Size  of  Blade  Systems: 


CAREFUL,  DON'T  TRIP  OVER 

THE  INFRASTRUCTURE. 


■  : 
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Strength  and  power,  now  in  a  smaller,  more  convenient 
size.  Introducing  the  HP  BladeSystem  c3000.  All  the 
technology  of  our  larger  BladeSystem  in  an  efficient, 
compact,  affordable  package.  Careful,  watch  your  step. 


Technology  for  better  business  outcomes. 
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■  EDITOR’S  NOTE 

i  )on  Tennant 

Crossing  the  Line 


There  it  is  again:  “Big  Brother.”  This  time,  the 
term  has  crept  onto  the  cover  of  this  week’s  print 
issue  and  into  the  headline  of  Rob  Mitchell’s  story, 
which  warns  that  “Big  Brother  Really  Is  Watch¬ 
ing.”  Few  other  terms  elicit  as  much  emotion  as  this  one  does. 


I  conveyed  my  lack  of 
patience  with  that  fact  in  a 
column  I  wrote  last  August 
about  the  national  identity 
card  debate,  when  I  noted 
that  privacy  rights  activ¬ 
ists  had  predictably  evoked 
the  name  of  the  George 
Orwell  classic  1984  in  their 
rallying  cry. 

“It’s  difficult  to  think  of 
a  single  published  work 
that  has  caused  more 
senseless  hand-wringing 
or  outright  paranoia,”  I 
wrote.  “It  seems  all  you 
have  to  do  is  whisper 
‘1984’  or  ‘Big  Brother,’  and 
you’re  able  to  whip  people 
into  a  privacy  rights  frenzy 
that  sends  them  over  the 
common-sense  edge.” 

I  got  an  earful  from 
privacy  fanatics  after  that 
column,  as  I  did  after  one 
I  wrote  about  a  year  and 
half  ago  titled  “Thinking 
the  Unthinkable.”  The  lat¬ 
ter  column  was  especially 
controversial,  because  I  ar¬ 
gued  in  support  of  the  idea 
of  implanting  locator  chips 
in  children.  Addressing  the 
unthinkable  reality  that 
kids  go  missing,  I  stood 
:  in  support  of  a  comment 
'  that  former  Sun  Microsys- 
•  terns  CEO  Scott  McNealy 


once  made  on  the  subject. 

“If  I  could  embed  a  loca¬ 
tor  chip  in  my  child  right 
now,  I  know  I  would  do 
that,”  McNealy  had  said. 
“Some  people  call  that  Big 
Brother.  I  call  it  being  a 
father.” 

It’s  clear,  then,  that  I 
find  it  unacceptable  that 
“Big  Brother”  concerns 
too  often  trump  legitimate 
efforts  to  ensure  our  com¬ 
munal  security  and  our 
individual  protection.  But 
there’s  something  else  that 
needs  to  be  made  equally 
clear:  There  is,  to  be  sure, 
a  line  that  must  never  be 
crossed. 

That  line  often  comes 
into  sharp  focus  for  me,  as 
it  did  during,  of  all  things, 
Mike  Wallace’s  interview 
of  Roger  Clemens  last 
week  on  60  Minutes.  The 
interview  with  the  veteran 
pitcher  focused  on  allega¬ 
tions  that  Clemens  had  tak- 

■  Every  human 
being  needs  and 
deserves  the 
sanctuary  and 
refuge  of  his  own 
thoughts. 


en  performance-enhancing 
drugs  —  allegations  that 
he  has  vehemently  denied. 
Near  the  end  of  the  inter¬ 
view,  Wallace  asked  Clem¬ 
ens  if  he  would  be  willing 
to  take  a  lie-detector  test 
to  clear  his  name. 

“Some  say  they’re  good, 
some  say  they’re  not,”  Cle¬ 
mens  responded.  “I’ll  do 
whatever.” 

I  heard  myself  speaking 
out  loud  to  the  TV  screen: 
“Don’t  do  it,”  I  muttered. 

It  was  a  knee-jerk  re¬ 
action  that  came  amid 
flashbacks  of  the  times 
I  had  been  polygraphed 
during  my  former  career 
in  the  U.S.  intelligence 
community.  Because  of 
the  particular  work  I  was 
doing,  the  frequency  of  the 
polygraph  examinations 
was  even  greater  than  is 
normally  the  case  in  that 
line  of  work. 

I  felt  strongly  about  my 
service  in  that  capacity, 
so  subjecting  myself  to 
the  examinations  seemed 
worthwhile.  But  I  dreaded 
them.  It’s  difficult  to  de¬ 
scribe  how  intrusive  and 
invasive  they  feel  when 
you’re  being  asked  the 
most  personal  of  questions 


while  seated  in  a  chair 
with  sensors  strapped 
around  your  body  and  at¬ 
tached  to  your  fingertips, 
and  a  blood-pressure 
cuff  gripping  your  arm. 

I  wouldn’t  wish  that  un¬ 
pleasantness  on  anyone. 

So  it  was  with  a  great 
deal  of  discomfort  that  I 
read  our  cover  story,  in 
which  Mitchell  details 
efforts  by  the  U.S.  Depart¬ 
ment  of  Homeland  Secu¬ 
rity  to  develop  technology 
that  virtually  probes  the 
body  of,  say,  an  airline 
passenger  to  determine 
whether  the  individual’s 
thoughts  are  of  deception. 

The  idea  is  to  create  a 
system  that  would  ana¬ 
lyze  expressions,  gestures 
and  voice  patterns,  and 
monitor  physiological 
characteristics  such  as 
heart  and  respiration  rates, 
to  basically  get  inside  the 
person’s  head.  The  aim  is 
to  determine  whether  the 
person  is  thinking  things 
he  shouldn’t  be  thinking. 

That  is  the  line  that 
must  never  be  crossed. 
Every  human  being  needs 
and  deserves  the  sanctu¬ 
ary  and  refuge  of  his  own 
thoughts.  Track  his  activ¬ 
ity  when  necessary.  Watch 
him  if  you  must.  But  don’t 
mess  with  what  he’s  think¬ 
ing.  Doing  so  is  as  un¬ 
thinkable  as  it  gets.  ■ 

Don  Tennant  is  editorial 
director  of  Computerworld 
and  InfoWorld.  Contact 
him  at  don_tennant@ 
computerworld.com,  and 
visit  his  blog  at  http:// 
blogs.computerworld. 
com/tennant. 
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■  LETTERS 


Macs  Are  a  Joy  to  Use, 
But  Not  to  Develop  On 

Mark  Hall  missed  a  point  in  his  “Ap¬ 
ple  vs.  IBM”  Editor’s  Note  of  Nov.  26. 
In  order  to  flourish  in  the  enterprise 
space,  a  platform  must  have  the  tools 
needed  to  build  enterprise  applica¬ 
tions.  What  are  those  tools  for  Mac 
and  Xserve?  If  the  answer  is  LAMP 
or  something  similar,  the  enterprise 
will  never  respond  to  Apple.  LAMP 
is  much  less  expensive  to  deploy  on 
non- Apple  systems. 

I’ve  developed  custom  applica¬ 
tions  for  small  businesses.  One  of 
my  first  clients  was  a  graphics  house, 
and  building  something  for  the  Mac 
would  have  cost  twice  as  much  be¬ 
cause  of  the  limited  number  of  tools 
and  almost  nonexistent  aftermarket 
for  components.  Most  of  the  graphics 
tools  they  wanted  were  available  on 
PCs.  It’s  always  a  joy  to  use  a  Mac. 
But  not  for  developers. 

■  Will  Fastie,  IT  management 
consultant,  ptCTO.com,  Baltimore 

On  Netscape’s  Demise 

The  Netscape  browser  has  been  only 
a  shadow  of  its  former  self  ever  since 
AOL  bought  it  out,  and  it  has  been  al¬ 


most  completely  irrelevant  for  at  least 
five  years  [“Microsoft:  Now-Dead 
Netscape  Shows  Antitrust  Decree 
Worked,”  Computerworld.com,  Jan.  2]. 
The  real  successor  of  Netscape  is  the 
Mozilla  Foundation,  which  Netscape 
established.  Besides,  the  death  of 
the  competitor  whose  mistreatment 
prompted  the  original  Microsoft  anti¬ 
trust  case  is  hardly  a  logical  argu¬ 
ment  for  dismissal. 

■  John  L.  Ries,  Cedar  City,  Utah 

Old-timers  Know 
Virtualization 

It’s  great  that  Microsoft  is  com¬ 
ing  out  with  a  reasonably  complete 
model  for  virtualization  [“Windows 
Server  2008  Revealed:  Hyper-V  Vir¬ 
tualization,”  Computerworld.com, 
Dec.  20].  If  people  need  to  know 
more,  they  can  ask  Really  Old  People 
—  the  ones  who  have  been  using 
this  concept  for  an  entire  genera¬ 
tion  now  on  IBM  mainframes,  in 
the  context  of  both  VM  and  PR/SM. 
Or  the  curious  can  ask  Slightly  Old 
People  —  the  ones  who  used  to  run 
Windows  under  IBM’s  OS/2,  long  be¬ 
fore  Microsoft’s  Windows  was  stable 
enough  to  run  for  an  entire  working 
day  without  a  reboot. 

■  Sean  A.  Dunn,  McLean,  Va. 
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Can  Macs  Conquer 
The  Enterprise? 

The  field  is  wide  open  for 
a  Macintosh  insurrection 
on  the  business  desktop.  It 
could  happen  but  probably  won’t.  Here’s  why. 


Review:  Two  New  22-in. 

LCDs  Offer  Great  Views 

Two  new  displays  from  Envision  and  Lenovo 
offer  good-quality  video  for  desktops  that 
can’t  handle  larger  monitors. 


Q&A:  Ohio  Secretary 
Of  State  Jennifer  Brunner 

Ohio  has  been  the  epicenter  of  controversy 
over  e-voting  for  a  while  now,  but  recent  ac¬ 
tion  from  the  secretary  of  state’s  office  may 


start  to  drain  that  swamp.  Brad  Friedman 
asks  a  few  pointed  questions. 


Energy  Crisis:  Where’s  an 
Outlet  When  You  Need  One? 

As  electronic  gadgets 
become  increasingly 
pervasive,  ways  to  keep 
them  powered  are  failing 
to  keep  up.  It’s  a  problem 
that  screams  for  a  solution, 
says  columnist  Mike  Elgan. 


News  From  CES  2008 

Get  the  scoop  on  what  was  hot  at  the  recent 
International  Consumer  Electronics  Show, 
from  Bill  Gates’  goodbye  video  spoof  to  hard¬ 
ware  recycling,  mega  disk  drives  and  a  bunch 
of  cool  gadgets. 


DATA  CENTER 

Robbery  Alters  Thinking 
On  Data  Center  Security 


N  OCTOBER,  Web  host¬ 
ing  vendor  C  I  Host  Inc.’s 
data  center  in  Chicago 
was  robbed  by  two  masked 
men,  who  allegedly  pistol- 
whipped  a  lone  IT  staffer 
working  the  graveyard  shift 
and  then  held  him  hostage 
for  two  hours  while  stealing 
computer  equipment. 

It’s  rare  for  data  centers 
to  be  attacked  so  brazenly. 
Typically,  they’re  secured 
by  protections  such  as  steel 
doors,  security  guards  and 
electronic  access  controls. 

But  Christopher  Faulkner, 
CEO  of  Irving,  Texas-based 


C  I  Host,  said  this  month 
that  he  no  longer  thinks 
data  centers  are  as  secure  as 
most  IT  managers  believe 
they  are.  And  he  added  that 
he  sees  the  armed  robbery 
as  a  wake-up  call  for  other 
organizations. 

There  have  been  scattered 
reports  of  other  robberies, 
including  one  last  year  in 
London.  But  William  Di- 
Bella,  president  of  AFCOM, 
a  professional  association 
for  data  center  managers, 
contended  that  IT  facilities 
aren’t  low-hanging  fruit 
for  criminals.  “Most  data 


THE  WEEK  AHEAD 

MONDAY:  Cognos  shareholders  are  slated  to  vote  on  IBM's 
proposed  acquisition  of  the  business  intelligence  vendor. 

The  next  day,  Cognos  will  announce  a  new  version  of  its  busi¬ 
ness  performance  management  software  in  New  York. 

TUESDAY:  Oracle  plans  to  issue  27  security  fixes,  including 
critical  updates  for  its  databases  and  business  applications. 

TUESDAY:  Macworld  Conference  &  Expo  opens  in  San  Fran¬ 
cisco;  Microsoft  is  due  to  release  Office  2008  for  Mac  there. 


centers  are  very  well  hidden 
and  secure,”  DiBella  said. 

Even  so,  Faulkner  claimed 
that  most  data  center  own¬ 
ers  haven’t  planned  for  the 
worst  possible  occurrences. 
“Data  center  security,  in 
the  past  five  years,  has  been 
about  the  show  for  the  cus¬ 
tomer,”  he  said. 

C  I  Host’s  Chicago  data 
center  is  in  a  leased  build¬ 
ing.  According  to  Faulkner, 
the  robbers  entered  the 
building  via  a  fire  escape.  A 
security  guard  wasn’t  at  his 
post,  and  the  thieves  waited 
in  a  hall  for  the  IT  staffer 
who  was  on  duty  to  leave 
the  data  center. 

After  accosting  and  sub¬ 
duing  the  employee,  the 
two  men  swiped  his  badge 
through  a  reader,  entered 
his  PIN  on  a  keypad  outside 
the  door  to  the  data  center 
and  forced  him  to  do  a  fin¬ 
gerprint  scan,  Faulkner  said. 

Since  the  robbery, 
Faulkner  has  adopted  new 
security  measures,  which 
he  declined  to  disclose, 
except  to  say  that  he  hired 
an  armed  guard  who  works 
directly  for  the  company. 

C  I  Host,  which  has  two 
other  data  centers,  in  Dallas 
and  Los  Angeles,  also  now 
trains  its  staffers  on  how  to 
respond  to  such  incidents. 
Faulkner  said  the  training 
can  be  boiled  down  to  this 
message:  “Fully  cooperate” 
with  any  intruders. 

—  Patrick  Thibodeau 


Six  Firms 
Settle  Software 
License  Disputes 

last 

week  agreed  to  pay  nearly 
$700,000  collectively  to 
settle  claims  that  they  used 
unlicensed  software  from 
several  vendors. 

The  Business  Software 
Alliance  said  that  the  settle¬ 
ment  also  requires  the  com¬ 
panies  to  delete  all  of  the 
unlicensed  software  copies, 
acquire  any  needed  licenses 
and  implement  strong  soft¬ 
ware  licensing  management 
practices. 

The  BSA,  a  trade  group 
representing  several  IT 
vendors,  said  the  six  firms  in¬ 
clude  mortgage  brokers,  me¬ 
dia  companies  and  retailers  in 
the  Midwest  and  New  York. 

“We  wish  it  weren’t 
necessary,  but  enforcing 
copyrights  has  proven  to  be 
the  best  way  to  encourage 
businesses  to  take  any  steps 
necessary  to  become  com¬ 
pliant,”  said  Jenny  Blank, 
the  BSA’s  senior  director  of 
legal  affairs. 

-GRANT  GROSS, 

IDG  NEWSSERVICE 


u 

o 

< 


Ui 

O 


6  COMPUTERWORLD  JANUARY  14,  2008 


WHEN  INFORMATION  AVAILABILITY  MATTERS  g 


SUNGARO 

Availability  Services 


j  Keeping  People 
i  and  Information 
I  Connected'. 


680  East  Swedesford  Road,  Wayne  PA  19087 
800-468-7483  |  www.availability.sungard.com 


TO  SEE  THE  TOP  SEVEN  ROADBLOCKS  COMPANIES  FACE  IN  ACHIEVING  INFORMATION  AVAILA|ilUTO 

AND  FIND  OUT  HOW  TO  AVOID  THEM  VISIT  WWW.AVAILABILITYSUNGAR0^CgM/IAJv^&' - 


SunGard.  Setting  new  standards  for 
Information  Availability  by  delivering 
a  range  of  solutions  that  meet  your 
specific  availability  objectives.  Flexible 
enterprise  wide  solutions  from  IT 
management  to  Advanced  Recovery®*^. 
2,500  experts.  Three  decades  of 
experience.  100%  successful 
recovery  track  record. 


To  see  how  SunGard  can  help 
improve  your  IT  availability  stop 
by  www.availability.sungard.com 
or  call  800-871-5857  today. 


■  NEWS  DIGEST 


CYBERCRIME 


‘Hacker  Safe’  Web  Site 
Suffers  Security  Breach 


Even  if  a  Web  site  dis¬ 
plays  a  seal  certifying 
that  it  is  hackproof,  it 
may  not  always  be  immune 
to  security  breaches. 

A  case  in  point  is  Geeks.- 
com,  which  on  Jan.  4  began 
notifying  an  undisclosed 
number  of  customers  that 
their  personal  and  financial 
data  may  have  been  com¬ 
promised.  The  online  tech¬ 
nology  retailer,  whose  for¬ 
mal  name  is  Genica  Corp., 
said  in  a  warning  letter  that 
it  discovered  the  system 
intrusion  on  Dec.  5. 

The  compromised  in¬ 
formation  included  names, 
addresses,  telephone  num¬ 
bers  and  Visa  credit  card 
numbers,  according  to  a 


copy  of  the  letter  posted  on 
The  Consumerist  blog. 

Geeks.com  is  a  $150  mil¬ 
lion  company  specializing 
in  the  sale  of  excess  inven¬ 
tory  and  manufacturers’ 
closeouts.  Its  Web  site  says 
that  it  is  tested  on  a  daily 
basis  by  ScanAlert  Inc., 
which  offers  a  service  that 
constantly  monitors  sites 
for  vulnerabilities. 

But  ScanAlert  spokes¬ 
man  Nigel  Ravenhill  said 
via  e-mail  last  week  that 
the  vendor,  which  is  being 
acquired  by  McAfee  Inc., 
had  withdrawn  its  Hacker 
Safe  certification  from 
Geeks.com  “several  times” 
last  year  after  finding  vul¬ 
nerabilities  in  the  retailer’s 


systems.  Geeks.com  fell 
out  of  compliance  last 
June  and  again  in  Decem¬ 
ber,  he  said. 

“Preliminary  evidence 
uncovered  while  in¬ 
vestigating  this  matter 
suggests  that  the  breach 
most  likely  occurred 
during  one  of  these  pe¬ 
riods,”  Ravenhill  wrote. 
He  added  that  each  time 
ScanAlert  withdrew  its  cer¬ 
tification,  Geeks.com  fixed 
the  problems.  The  retailer 
currently  meets  the  require¬ 
ments  for  the  Hacker  Safe 
logo,  Ravenhill  said. 

A  telephone  operator  at 
Geeks.com’s  headquarters 
in  Oceanside,  Calif.,  said 
she  was  unable  to  find  any¬ 
one  who  could  comment 
about  the  incident. 

According  to  the  letter 
sent  to  customers,  the  in¬ 
trusion  has  been  reported 
to  Visa  Inc.,  local  law  en¬ 
forcement  authorities  and 
the  U.S.  Secret  Service. 

Geeks.com  has  also 
hired  a  consulting  firm  “to 
determine  how  this  inci¬ 
dent  occurred  and  to  con¬ 
firm  that  information  we 
obtain  is  protected  to  the 
fullest  extent  reasonably 
possible,”  wrote  Chief  of 
Security  Jerry  Harken. 

—  Jaikumar  Vijayan 


SECURITY 


Mailing  Exposes  Personal 
Data  of  Wisconsin  Residents 


THE  WISCONSIN  Department  of 
Health  and  Family  Services  last 
week  called  on  Electronic  Data 
Systems  Corp.  to  explain  how 
Social  Security  numbers  were 


explain  the  gaffe,  pay  the  costs 
involved  in  notifying  affected 
individuals  of  the  error  and  pro¬ 
vide  each  with  a  year  of  credit¬ 
monitoring  services. 


printed  on  the  address  labels 
of  brochures  sent  to  more  than 
260,000  recipients  of  state 
health  services. 

The  state  agency  is  asking 
the  Plano,  Texas,  outsourcer  to 


“They  need  to  explain  to  us 
what  happened  and  what  they 
are  doing  to  ensure  this  doesn’t 
happen  again,”  said  Karen  Tim- 
berlake,  deputy  secretary  of  the 
state  agency. 


MThe  question 
that  everyone 
has  is,  how,  with  all  of 
the  sensitivity  around 
protection  of  Social  Se¬ 
curity  numbers,  could 
this  have  happened? 

KAREN  TIMBERLAKE, 

DEPUTY  SECRETARY. 

WISCONSIN  DEPARTMENT  OF 
HEALTH  AND  FAMILY  SERVICES 


An  EDS  spokesman  called  the 
incident  an  isolated  error  that 
occurred  when  the  address  file 
was  created  earlier  this  month. 
The  company  plans  to  take 
“appropriate  actions”  against 
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Short 

Takes 

Microsoft  Corp.  has  re¬ 
leased  a  patch  to  fix  a  crit¬ 
ical  flaw  in  the  Windows 
operating  system  that 
could  be  used  by  criminals 
to  create  a  self-copying 
computer  worm  attack. 

A  second  patch  fixes  a 
less  serious  flaw  that  lets 
hackers  steal  passwords. 

The  state  of  New  York 
has  launched  an  investi¬ 
gation  to  determine  if  Intel 
Corp.  violated  antitrust 
laws  by  coercing  custom¬ 
ers  to  not  use  processors 
from  rival  Advanced  Micro 
Devices  Inc.  Intel  has 
faced  similar  investiga¬ 
tions  in  Europe  and  Asia. 
(See  related  item,  page  9.) 

Microsoft  last  week 
agreed  to  buy  Oslo-based 
search  software  firm  Fast 
Search  &  Transfer  ASA 
for  $1.3  billion  in  cash. 
Microsoft  said  it  hopes  to 
integrate  Fast’s  high-end 
products  with  its  Share- 
Point  search  technology. 

Jeff  Raikes  plans  to 
retire  as  president  of 
Microsoft’s  business  divi¬ 
sion  in  September.  He  will 
be  replaced  by  Stephen 
Elop,  former  chief  oper¬ 
ating  officer  at  Juniper 
Networks  Inc. 


those  involved,  he  added. 

Timberlake  said  that  EDS  has 
worked  on  state  Medicaid  ser¬ 
vices  for  30  years  and  mailed 
similar  brochures  many  times, 
and  this  is  the  first  such  error. 

“The  reality  is . . .  you  can’t 
prevent  human  error,”  she  said. 

The  incident  comes  just  over 
a  year  after  the  Department  of 
Revenue  disclosed  that  Social 
Security  numbers  were  mis¬ 
takenly  printed  on  mail  sent  to 
171,000  Wisconsin  taxpayers. 

-  JAIKUMAR  VIJAYAN 


By  John  Klossner 


■  NEWS  DIGEST 


SECURITY 


IT  Worker  Jailed  for 
Creating  Logic  Bomb 


2  “This  case  is  unique  in 
i  that  it  touches  on  the  public 
o  health  system,”  said  Assis¬ 
tant  U.S.  Attorney  Erez 
Liebermann,  who  prosecut¬ 
ed  the  case. 

The  logic  bomb,  designed 
to  delete  “virtually  all  of  the 
information”  on  Medco’s 
servers,  was  written  by  Lin 
and  planted  in  multiple 
scripts  on  the  company 
network,  according  to  court 
documents. 

The  malicious  code  was 
initially  set  up  to  be  trig¬ 
gered  on  April  23, 2004,  but 
it  failed  because  of  a  coding 
error.  Lin  reset  it  to  deploy 
a  year  later,  but  a  co-worker 
discovered  and  disabled  the 
bomb,  Liebermann  said. 

—  Sharon  Gaudin 


A  FORMER  SYSTEMS  ad¬ 
ministrator  at  Medco 
Health  Solutions  Inc. 
last  week  was  sentenced  to 
30  months  in  federal  prison 
for  planting  a  logic  bomb 
that  could  have  taken  down 
a  corporate  network  that 
held  personal  health  care 
information. 
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LAST  WEEK 


Bill  Gates,  Microsoft 
Corp.’s  outgoing  chairman, 
said  at  the  2008  interna¬ 
tional  Consumer  Electronics 
Show  in  Las  Vegas  that  the 
software  vendor  has  now 
sold  more  than  100  million 
licenses  for  Windows  Vista. 

The  White  House  Office  of 
Management  and  Budget 


said  it  will  release  the  fed- 
,  eral  government’s  first-ever 
,  paperless  budget  on  Feb.  4. 

0MB  officials  expect  the 
!  “e-budget”  to  save  nearly 
i  $1  million  over  five  years. 

I  ONE  YEAR  AGO:  NCR  Corp. 

‘  announced  a  plan  to  spin 
;  off  Teradata  Corp.,  its  data 
'  warehousing  division. 


Yung-Hsun  Lin,  51,  of 
Montville,  N.J.,  who  was 
sentenced  in  a  federal  court 
in  Newark,  faced  a  maxi¬ 
mum  10-year  prison  sen¬ 
tence.  He  had  pleaded  guilty 
to  one  count  of  computer 
fraud  in  September. 

Lin  was  responsible  for 
programming  and  maintain¬ 
ing  the  70  HP  Unix-based 
servers  at  the  Franklin 
Lakes,  N.J.-based  pharmacy 
benefits  management  com¬ 
pany,  where  he  worked  from 
1997  to  2005.  The  systems 
held  client  medical  and  bill¬ 
ing  data,  along  with  corpo¬ 
rate  financial  applications. 


PENALTIES 

■  30-month  prison  sentence 

■  $81,200  restitution 
payment 

■  Two  years  of  supervised 
release 

■  No  computer  use  until 
supervised  release  ends 


Global 

Disoati 


spatches 


Suit  Filed  to  Block 
German  E-vote 

BERLIN  -  A  computer  club  is 
seeking  an  injunction  in  a  Ger¬ 
man  court  to  prevent  the  use  of 
electronic  voting  machines  in 
state  elections  later  this  month. 

The  Chaos  Computer  Club, 
founded  here  in  1981,  contends 
that  the  German  government 
doesn’t  have  the  technical 
knowledge  to  ensure  that  the 
e-voting  machines  are  not  ma¬ 
nipulated,  a  spokesman  said. 
The  club  supports  the  use  of 
paper  ballots,  he  said. 

In  the  Jan.  27  elections, 
eight  cities  and  districts  in  the 
German  state  of  Hesse  plan  to 
use  e-voting  machines  made 
by  Groenlo,  Netherlands-based 
N.V.  Nederiandsche  Appara- 


tenfabriek  and  software 
developed  by  Hilversum, 
Netherlands-based 
Groenendaal. 

The  club  contends  that 
tests  mandated  by  the  Hesse 
Ministry  of  the  Interior  would 
not  help  ensure  that  criminals 
would  be  unable  to  hack  the 
devices. 

Jeremy  Kirk, 

IDG  News  Service 

Intel  Answers  EC 
Antitrust  Charges 

BRUSSELS  -  Intel  Corp.  has 
formally  responded  to  antitrust 
charges  filed  against  it  by  the 
European  Commission.  Intel 
also  requested  that  the  EC 
schedule  a  hearing  on  the 
allegations. 

In  July,  the  EC  accused 
the  chip  maker  of  handing 
out  “substantial  rebates”  to 
computer  manufacturers  that 
agreed  to  buy  the  bulk  of  their  ^ 


x86  chips  from  Intel. 

It  also  accused  the  company 
of  paying  computer  makers  to 
delay  the  launch  of  computers 
based  on  chips  from  rival  Ad¬ 
vanced  Micro  Devices  Inc. 

Details  of  Intel’s  response 
were  not  disclosed. 

Paul  Meller, 

IDG  News  Service 

BRIEFLY  NOTED 

China  Electronics  Import  & 
Export  Co.  has  announced 
plans  to  sell  its  30%  stake  in 
Hewlett-Packard  Co.'s  Chinese 
operations.  The  state-owned 
firm  set  a  minimum  price  of 
967  million  yuan  ($134  million 
U.S.)  for  its  share. 

Sumner  Lemon, 

IDG  News 
Service 
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Introducing  IBM  BladeCenter  S  Express.  Now  you 
can  combine  blade  servers,  storage,  switches  and 
management  tools  in  one  small  chassis.  It’s  easy  to 
set  up.  Easy  to  use.  Easy  to  manage.  It’s  a  simple 
way  to  simplify  your  IT. 

From  the  people  and  Business  Partners  of  IBM: 

It’s  innovation  made  easy. 


SIMPLIFY  AND  MANAGE  YOUR  I.T.WITH  A  SINGLE  CHASSIS. 


PN:8886E1U _ 

Up  to  six  application  blades  with  the  ability  to  expand  to  multiple 
virtual  blades _ 

Integrated  storage  built  into  the  chassis  -  3.6TB  SAS  or  STB  SATA 
3-year  customer  replaceable  unit  and  on-site  limited  warranty^ 


IBM  BLADECENTER  HS21  EXPRESS 

$2,359  (SAVE  $249) 

OR  $62/MONTH  FOR  36  MONTHS' 

PN;8853E1U 

Features  up  to  two  high-performance  Dual-Core  or  Quad-Core  Intel’ 

Xeon*  Processors 

1GB  standard/16GB  maximum  memory  per  blade  (32GB  with  Memory  and 
I/O  Expansion  Unit) 

3-year  customer  replaceable  unit  and  on-site  limited  warranty^ 


IBM  SYSTEM  STORAGE  DS3300  EXPRESS 

$4,545  (SAVE  $450) 

OR  $120/MONTH  FOR  36  MONTHS’ 

PN: 172631 E _ 

Support  for  dual-port  and  hot-swappable  SAS  disks  at  10,000  and  15,000 
RPM  speeds 

Expandable  by  attaching  up  to  three  EXP3000s  or  a  total  of  48  hard  disk  drives 
3-year  limited  warranty  on  parts  and  labor^ 


IBM  Express  “Bundle  and  Save” 

We  buitidle  our  Express  systems  to  give  you  the 
accessories  you  need  -  while  saving  you  money  on 
the  hardware  you  want.  Act  now.  Available  now  through 
ibcn.c6M.and  IBM  Business  Partners. 


express 

advantage' 


ibm.com/systems/onebox 
1  866-872-3902  (mention  6N8AH01A) 
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WEB  BROWSERS  ■ 


IE  Still  Top  Dog 
In  Corporate 
Browser  Kennel 


Deployment  and  management 
issues  are  keeping  Firefox 
leashed  at  many  companies, 
enabling  Internet  Explorer 
to  remain  dominant.  By  Eric  Lai 


WITH  A  new  CEO 
on  board  and  a 
major  update  of 
its  Firefox  Web 
browser  expected  this  year, 
Mozilla  Corp.  hopes  to  rein¬ 
vigorate  its  campaign  to  pull 
users  away  from  Microsoft 
Corp.’s  still-dominant  Inter¬ 
net  Explorer  software. 

But  the  Mountain  View, 
Calif.-based  open-source 
vendor  continues  to  expend 
little  energy  on  wooing  IT 
managers  to  formally  adopt 
Firefox  for  deployment 
within  their  organizations. 

In  the  past,  Firefox  faced 
two  main  obstacles  among 
enterprise  users:  its  imma¬ 
turity,  and  its  incompatibil¬ 
ity  with  corporate  Web  ap¬ 
plications  and  intranets  that 
relied  on  Microsoft  technol¬ 
ogies  such  as  ActiveX. 

Now  nearly  three  and  a 
half  years  old  and  nearing 
the  release  of  Version  3, 
Firefox  no  longer  can  be  ac¬ 
cused  of  being  callow.  And 
while  many  IE-only  apps  re¬ 
main,  plenty  of  others  have 
been  overhauled  to  support 
Firefox  as  well,  according 
to  Rafael  Ebron,  general 
manager  of  Browser  Garage 
LLC,  a  Web  consulting  firm 
in  Mountain  View. 

However,  other  obstacles 
to  broader  adoption  have 
emerged.  Mozilla  has  thus 
far  neglected  to  develop 
tools  to  help  IT  departments 
deploy  and  manage  Firefox, 
and  it  doesn’t  offer  paid 
technical  support  services  to 
risk-averse  corporate  users. 

“The  enterprise  is  looking 
for  a  neck  to  choke,  and  that 
is  absolutely  what  is  missing 
from  Firefox,”  said  Ebron,  a 
former  product  manager  for 
Firefox  and  its  predecessor, 
Netscape  Navigator.  “If  you 
have  a  problem  with  IE  and 
you  are  a  big  enough  cus¬ 
tomer  to  Microsoft,  [CEO] 
Steve  Ballmer  is  going  to 
come  out  and  talk  to  you. 


That  isn’t  there  yet  from 
Mozilla.  It  isn’t  their  focus.” 

Mozilla  claims  that  Fire¬ 
fox  has  more  than  125  mil¬ 
lion  users.  And  according 
to  market  researchers,  the 
open-source  browser  has 
made  some  steady,  albeit 
relatively  small,  inroads 
against  IE  on  usage. 

For  example,  Net  Applica¬ 
tions  Inc.,  an  Aliso  Viejo, 
Calif.-based  company  that 
tracks  visitors  to  about 
40,000  Web  sites,  said 
Firefox  held  a  17%  share  of 
browser  usage  in  December, 
compared  with  76%  for  IE. 

Similarly,  Janco  Associ¬ 
ates  Inc.  in  Park  City,  Utah, 
currently  gives  Firefox  a  16% 
usage  share  among  visitors 
to  17  business-to-business 
Web  sites  that  it  monitors, 
lanco  places  IE’s  share  at 
67%  while  giving  9%  to 
Netscape  and  3%  to  Google 
Desktop.  (NetApplications 
credits  Netscape  with  only 
a  minuscule  market  share, 
and  it  doesn’t  include  Google 
Desktop  in  its  rankings.) 

Firefox’s  market  share  has 
increased  from  14%  since 
last  January,  while  IE’s  share 
has  eroded  by  two  percent¬ 
age  points,  according  to 
Janco.  But  Firefox’s  gains 
have  mostly  come  from 
workers  installing  the 
browser  on  their  own, 
without  IT’s  blessing,  noted 
Janco  CEO  Victor  Janulaitis. 

“Users  are  frustrated  with 
Microsoft’s  product,  and 
more  people  are  starting  to 
experiment  in  enterprises 
with  Firefox,”  he  said. 

Firefox  may  gain  more 
users  following  AOL  EEC’s 
Dec.  28  announcement  that 
it  will  discontinue  Netscape 
Navigator  —  and  its  recom¬ 
mendation  that  users  switch 
to  Mozilla’s  browser. 

But  Mozilla’s  laissez-faire 
attitude  toward  corporate 
users  can  lead  to  awkward 
situations,  such  as  the  one 
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at  a  leading  vendor  of  Web- 
based  software.  The  CIO, 
who  asked  not  to  be  identi¬ 
fied,  said  his  company  is  a 
longtime  Microsoft  shop 
that  has  standardized  on  IE 
as  its  browser  of  choice. 

Even  so,  all  of  the  applica¬ 
tions  that  the  vendor  sells  or 
uses  internally  can  run  on 
multiple  browsers.  And  de¬ 
mand  for  Eirefox  among  its 
employees  is  so  heavy  — 
“Salesforce.com  runs  bet¬ 
ter  in  Eirefox,”  one  worker 
told  the  CIO  —  that  the 
internal  ratio  of  Eirefox  to 
IE  usagei  is  about  60:40. 

The  big  downside  is 
the  difficulty  of  managing 
Eirefox,  especially  in  com¬ 
parison  with  administering 
IE,  according  to  the  CIO. 

Eor  example,  he  said  the  IT 
department  can  patch  IE  via 
automated  central  updates. 
On  the  other  hand,  he  said, 
“we  have  to  send  an  e-mail 
and  have  users  manually 
download  Eirefox  updates, 
which  is  not  ideal.” 

That  won’t  change  in 
Eirefox  3.  A  beta  release 
available  now  lacks  features 
that  IT  managers  typically 
want,  such  as  the  ability  to 
automatically  deploy  multi¬ 
ple  copies  of  Eirefox  through 
Windows  Installer  pack¬ 
age  files  —  better  known 
as  .MSI  files.  The  update 
also  can’t  be  patched  from 
a  central  console,  like  IE 
can  be  through  Microsoft’s 
Windows  Server  Update 
Services.  Nor  can  it  be  man¬ 
aged  and  secured  via  Active 
Directory,  Microsoft’s  tool 
for  setting  group  policies. 

As  a  result,  many  IT  staffs 
looking  for  help  in  rolling 
out  or  managing  Eirefox 
have  resorted  to  using  free 
third-party  tools. 

One,  FirefoxADM,  lets 
administrators  centrally 
manage  locked  or  default 
settings  in  Eirefox  via  group 
policy  settings  in  Active 
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Directory.  Another,  called 
FrontMotion,  offers  basic 
.MSI  installation  packages 
for  Eirefox  for  free  and  cus¬ 
tom  ones  for  a  small  fee. 

FirefoxADM  has  been 
downloaded  about  22,000 
times,  according  to  Mark 
Sammons,  a  senior  comput¬ 
ing  officer  at  the  University 
of  Edinburgh,  who  created 
the  tool  and  is  using  it  to 
manage  Eirefox  on  8,000 
PCs  at  the  Scottish  school. 

FrontMotion’s  install¬ 
ers  have  been  downloaded 
nearly  131,000  times,  said 
Eric  Kuo,  its  developer.  By 
day,  Kuo  works  as  an  IT  di¬ 
rector  at  a  medical  company 
in  Lubbock,  Texas,  that  he 
asked  not  be  identified. 

Both  FirefoxADM  and 
FrontMotion  are  open-source 
products.  But  each  is  largely 
developed  by  a  moonlight¬ 
ing  individual.  That  has  hurt 
FirefoxADM,  in  particular; 
Sammons  acknowledges  that 
he  hasn’t  added  any  new 
features  to  the  management 
tool  in  the  past  two  years. 

“I  have  no  illusions  as  to 
what  FirefoxADM  is,”  he 


wrote  in  an  e-mail.  “I  think 
it  works  well,  but  ultimately, 
it’s  a  work-around  for  func¬ 
tionality  that  really  needs  to 
be  built  into  Eirefox  itself.” 

An  even  bigger  problem  is 
that  Mozilla  hasn’t  formally 
tested  and  certified  either  of 
the  two  tools. 

“It’s  absolute  FUD  to  say 
that  you  can’t  administer 
Eirefox  well  within  an 
Active  Directory  environ¬ 
ment  with  third-party 
tools,”  Ebron  said,  using 
the  acronym  for  “fear,  un¬ 
certainty  and  doubt.” 

Nonetheless,  both  he 
and  Kuo  said  that  having 
Mozilla’s  official  seal  of  ap¬ 
proval  would  be  a  big  plus 
to  corporate  users  planning 
major  deployments. 

“It  comes  down  to  a  per¬ 
ception  of  who  owns  the 
tools,  not  the  tools  them¬ 
selves,”  Kuo  said.  He  noted 
that  preliminary  talks  with 
Mozilla  about  selling  Front- 
Motion  —  a  move  he  would 
welcome  —  went  nowhere. 

VENDOR  RESISTANCE 

Mozilla  has  no  plans  to 
more  tightly  integrate 
Eirefox  and  Active  Direc¬ 
tory,  according  to  Chris 
Hofmann,  the  open-source 
vendor’s  director  of  special 
projects.  He  dismissed 
Active  Directory  as  a  “pro¬ 
prietary  technology”  that 
would  hurt  rather  than  help 
Eirefox  administrators. 

“Multiple  levels  of  per¬ 
missions  applied  across 
different  groups  adds  a  lot  of 
complexity,”  he  said.  “If  you 
look  at  the  track  record  for 
that  feature,  it’s  resulted  in 
less  security  for  IE.” 

But  Hofmann  acknowl¬ 
edged  that  users  are  clamor¬ 
ing  for  Mozilla  to  provide 
more  enterprise  tools.  For 
example,  on  a  public  wiki 
maintained  by  Mozilla’s 
Eirefox  Enterprise  Working 
Group,  .MSI  installers  and 


better  tools  for  preferences 
management  top  a  new- 
features  wish  list. 

Automated  installers  are 
relatively  easy  to  create, 
and  such  a  tool  “might  come 
sooner”  from  Mozilla  than 
one  for  Active  Directory 
would,  Hofmann  said.  But 
he  added  that  Mozilla  has  no 
plans  to  acquire  or  certify 
third-party  tools  or  to  set  up 
a  paid  support  business  for 
enterprise  users. 

Mozilla’s  stance  doesn’t 
surprise  Kuo,  who  claimed 
that  the  organization  is 
dominated  by  developers 
who  would  be  unlikely  to 
find  the  idea  of  starting  an 
IT  support  business  sexy. 

Kuo  added  that  he  doesn’t 
think  Mozilla  will  suddenly 
change  its  attitude  and  de¬ 
velop  a  browser  deployment 
tool  that  could  render  Front- 
Motion  obsolete.  Mozilla 
“could  create  it  themselves,” 
he  said.  “But  it’s  obviously 
not  their  priority.” 

Michael  Kaply,  a  senior 
software  engineer  at  IBM 
who  calls  himself  a  “Eirefox 
advocate,”  said  that  the 
browser  is  being  used  by 
about  72,000  of  the  IT  ven¬ 
dor’s  360,000  employees. 

IBM  still  runs  some  Web 
applications  that  work  only 
with  IE.  But  it  is  building  in 
Eirefox  support,  Kaply  said 
via  e-mail.  For  example,  a 
travel  reservation  application 
was  recently  switched  to  a 
cross-browser  design.  “That 
was  a  big  hurdle,”  he  wrote. 

But  in  a  September  blog 
posting,  Kaply  lamented 
that  the  number  of  partici¬ 
pants  on  Eirefox  Enterprise 
Working  Group  conference 
calls  had  “dwindled.”  And 
in  an  earlier  posting,  he  said 
that  he  thought  most  large 
companies  that  had  adopted 
Eirefox  were  using  it  “as  a 
secondary  browser”  only.  ■ 
Gregg  Keizer  contributed  to 
this  story. 
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How  to  Protect 
and  Improve 
System  Performance 

The  Top  Ten  Points  to  Know  about  Fragmentation 

I  professionals  are  heroes  of  the  workplace.  Whether  with  cunning  wit  or 
I  I  a  Phillip’s  head  screwdriver,  they  solve  most  any  computer  emergency. 
I  I  However,  keeping  a  computer  running  at  top  speed  is  usually  preventative 
maintenance  instead  of  last-minute,  adrenaline-surging,  virus-vaccinating  heroics. 


Here  are  10  key  points  to  maintain  peak 
performance  across  any  network: 

1.  The  hard-disk  is  the  slowest  part  of 
any  system.  Say  you  are  operating  a  2.5 

GHz  processor.  That’s 
2.5  billion  opera¬ 
tions  every  second.  A 
large  number  of  hard 
disks  only  spin  at 
7200  rotations  per 
minute,  or  120  cycles 
per  second,  or  120 
Hz.  This  means  your  CPU  is  more  than  20 
million  times  faster  than  the  hard  disk.  The 
hard  disk  still  has  mechanical  components. 
Think  Terminator  2®,  when  a  mechanized 
Schwarzenegger  is  outclassed  by  the  faster, 
smarter  T-1000.  When  the  slowest  part 
of  your  computer  is  making  unnecessary 
reads,  the  entire  system  is  dragged  down. 

2.  Fragmentation  has  severe  affects. 

It’s  more  than  sluggish  and  crawling 
computer  speeds;  fragmentation  leads 
to  crashes,  hangs,  data  errors,  file 
corruption  and  boot-time  failures.  Files  that 
suffer  fragmentation  are  more  difficult  and 
take  longer  to  back  up.  When  systems  are 
thoroughly  defragmented,  they  run  faster 
and  more  reliably — period. 

3.  Real-time  defragmentation  is 
necessary.  Many  companies  rely  on 

24/7,  mission-critical 
servers.  Taking  these 
systems  offline  for 
maintenance  is  not 
an  option.  But,  having 
a  server  with  I/O 
bottlenecks  is  also 
not  an  option.  Only 
real-time,  invisible  defragmentation  fixes 
this  catch-22  situation. 

4.  Give  your  systems  faster-than-new 
speeds.  NTFS  best-fit  attempts  for  file 
placement  on  hard  drives  are  limited. 
Diskeeper®  2008  comes  with  a  new 
technology  called  f-FAAST™  (Intelligent 
File  Access  Acceleration  Sequencing 


Technology)^  that  re-sequences  your  files. 
So,  in  addition  to  consolidating  free  space, 
defragmenting  with  Diskeeper  boosts 
access  to  your  most  frequently  used  files 
by  as  much  as  80%.  I-FAAST  gives  systems 
faster-than-new  speeds. 

5.  Servers  are  especially  susceptible. 

While  disk  striping  improves  physical 
I/O  capacity  and  per¬ 
formance,  RAID  and 
SAN  systems  simply 
do  not  fix  fragmenta¬ 
tion  where  it  begins — 
at  the  file  system. 
Enormous  volumes 
with  heavy  read/write 
activity  lead  to  astronomical  fragmentation 
rates,  making  RAID  and  SAN  work  harder 


handles  millions  of  fragments  and  can 
function  with  as  little  as  1%  free  space. 

8.  Stop  fragmentation  before  it  happens. 

Diskeeper  2008  comes  with  Frag  Shield™ 
2.0,  a  technology  that  automatically  defends 
against  fragmentation  of  critical  system  files. 
Frag  Shield  2.0  prevents  crash-inducing  frag¬ 
mentation.  It’s  like  Superman®  saving  the 
day — two  days  before  there’s  a  problem. 

9.  Auto-defrag  breathes  life  into 
systems.  It  keeps  systems  at  optimum 
speeds  and  eliminates  fragmentation- 
related  performance  issues.  Thoroughly 
defragging  systems  adds  2-3  years  onto  the 
hardware’s  useful  life.^ 

10.  Analyze  your  network’s  performance. 

Poor  performance  on  a  remote  system  can 
easily  be  mistaken  for  a  slow  network.  Get 
Disk  Performance  Analyzer  for  Networks™. 
This  free  utility  scans  networked  systems 
for  fragmentation.  See  for  yourself  how 
fragmentation  is  affecting  your  systems. 
This  groundbreaking  program  will  provide 
comprehensive  reports  on  how  system 
speeds  will  improve  with  thorough  defrag¬ 
mentation.  Visit  www.diskeeper.com/cw2 
and  get  this  free,  must-have  utility. 

Diskeeper  2008  is  the  only  fully- 
automated  defragmentation  program.  It 
operates  invisibly  in  the  background  and  it 
dynamically  adapts  defragmentation  strate¬ 
gies  to  fit  the  needs  of  individual  volumes. 


When  systems  are  thoroughly  defragmented, 
they  run  faster  and  more  reliably — period. 


than  they  should.  The  efficiency  of  RAID 
and  SAN  may  lessen  some  of  the  physical 
effects  of  fragmentation,  but  fragmentation 
is  never  eliminated.  You’ll  need  to  buy  more 
and  more  equipment  to  compensate.  Sooner 
or  later,  the  tortoise  catches  the  hare,  and 
your  system  suffers  I/O  bottlenecks  and 
slow  server  speeds. 

6.  Operate  without  interrupting 
productivity.  The  new  InvisiTasking™ 
technology  makes  software  transparent. 
Diskeeper  2008  with  InvisiTasking  will 
work  invisibly  in  the  background;  only 
using  untapped  resources.  Systems  are 
continually  improved  without  any  manage¬ 
ment  or  impact  on  a  system’s  usability. 

7.  Defragment  despite  minimal  free 
space.  The  purpose  of  defragmentation 
is  to  restore  lost  speed  and  performance. 
A  defrag  engine  must  be  able  to  operate 
in  limited  free  space,  because  drives  with 
extremely  limited  free  space  are  the  ones 
in  need  of  the  most  help.  Diskeeper  2008 


With  new  defrag  engines,  Diskeeper  2008 
restores  performance  on  volumes  with 
as  little  as  1%  free  space.  Get  rid  of  slows, 
bottlenecks,  and  fragmentation-induced 
crashes.  Visit  www.diskeeper.com/cwl 

'  Available  on  Pro  Premier,  Server  and  EnterpriseServer  editions. 

^See  white  paper  at  vwwv.diskeeper.com/cwpaper 
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with  InvisiTasking  “ 

Diskeeper  2008 

Maximizing  Performance  and  Reliability — Automatically- 

Try  it  FREE  for  45  days! 

Download  a  free  trial  at 

www.diskeeper.com/cw1 

(Note:  Special  45-day  trialware  is 
only  available  at  the  above  link) 

Volume  licensing  and  Government/Education  discounts  are 
available  by  calling  800-829-6468,  extension  4415 
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Green  PC  Push  by 
Feds  May  Seed 
Wider  Adoption 

Federal  agencies  are  being 
required  to  buy  eco-friendly 
PCs  and  monitors  —  a  mandate 
that  likely  will  broaden  the 
availability  of  such  systems. 

By  Patrick  Thibodeau 


The  u.s.  govern¬ 
ment  is  moving 
ahead  with  a  plan 
to  require  federal 
agencies  to  buy  PCs  and 
computer  monitors  that  are 
energy  efficient  and  have  re¬ 
duced  levels  of  toxic  chemi¬ 
cals.  And  because  of  the 
government’s  massive  buy¬ 
ing  power,  the  plan  likely 
will  affect  systems  bought 
by  corporate  users  as  well. 

The  U.S.  Department 
of  Defense,  NASA  and  the 
General  Services  Adminis¬ 
tration  jointly  detailed  an 
interim  rule  on  the  green  IT 
purchasing  requirements 
in  the  Federal  Register  on 
Dec.  26. 

The  draft  rule  hews  to  an 
executive  order  signed  by 
President  Bush  last  January 


mandating  that  agencies  use 
the  Electronic  Product  Envi¬ 
ronmental  Assessment  Tool. 

EPEAT  is  a  three-tiered 
rating  system  developed 
by  the  Green  Electronics 
Council  in  Portland,  Ore. 
Qualifying  desktop  systems, 
laptops  and  monitors  are 
awarded  gold,  silver  and 
bronze  ratings  based  on  51 
criteria,  such  as  ease  of  dis¬ 
assembly  and  the  absence  of 
paints  or  coatings  that  aren’t 
compatible  with  reuse  or 
recycling. 

Products  must  conform 
to  23  of  the  criteria  to  get  a 
bronze  rating,  the  minimum 
level  required.  To  earn  a 
silver  or  gold  rating,  devices 
have  to  meet  more-stringent 
standards  —  for  example, 
90%  of  the  materials  used  to 
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make  them  must  be  reusable 
or  recyclable. 

The  federal  government 
has  a  total  installed  base 
of  6.7  million  desktops  and 
laptops,  and  it  buys  about 
2.2  million  new  systems  an¬ 
nually,  according  to  Shawn 
McCarthy,  an  analyst  at 
market  research  firm  IDC. 
Because  the  government  is 
such  a  large  user,  PC  ven¬ 
dors  will  hustle  to  comply 
with  the  new  federal  rule, 
McCarthy  said. 

And  since  the  vendors 
don’t  make  PCs  specifically 
for  government  users,  he 
added,  “you  will  see  spillover 
into  other  sectors,  much  as 
you  did  once  the  government 
pushed  Energy  Star  compli¬ 
ance  back  in  the  mid-1990s.” 
Energy  Star  is  an  energy  ef¬ 
ficiency  rating  system  devel¬ 
oped  by  the  Environmental 
Protection  Agency. 

Several  major  agencies  al¬ 
ready  adhere  to  EPEAT  cri¬ 
teria,  including  NASA,  the 
EPA  and  the  Department  of 
Homeland  Security.  Some 
private-sector  firms  have 
adopted  it  as  well.  Eor  in¬ 
stance,  Kaiser  Permanente 
buys  about  5,000  PCs  per 
month  that  meet  the  EPEAT 
criteria,  said  Dean  Edwards, 
vice  president  and  chief 
procurement  officer  at  the 
Oakland,  Calif.-based  health 
maintenance  organization. 

Of  particular  interest  to 
Kaiser  is  EPEAT’s  require¬ 
ment  that  desktops  and 
laptops  conform  to  the 
strictures  of  the  Energy  Star 
program.  The  EPA  revised 
its  efficiency  standards  for 
PCs  last  summer,  and  Ed¬ 
wards  said  that  systems 
purchased  by  Kaiser  since 
November  consume  20% 
less  power  than  prior  mod¬ 
els  did. 

Enforcing  environmental 
standards  can  help  cut  the 
total  cost  of  ownership  on 
PCs,  according  to  Edwards, 


who  also  would  like  to  apply 
EPEAT  to  copiers  and  multi¬ 
function  printers.  Kaiser 
currently  aims  to  buy  PCs 
with  silver  ratings,  but  Ed¬ 
wards  said  the  HMO  even¬ 
tually  may  make  the  gold 
rating  its  purchasing  goal. 

Only  a  few  vendors  have 
earned  gold  EPEAT  rat¬ 
ings  thus  far.  Dell  Inc.,  for 
instance,  has  six  products 
with  gold  ratings  and  72  at 
the  silver  level.  Hewlett- 
Packard  Co.  has  earned  a 
gold  rating  for  one  desktop 
system,  plus  73  silver  rat¬ 
ings.  Apple  Inc.  has  17  prod¬ 
ucts  that  meet  the  require¬ 
ments  for  a  silver  rating. 

Wayne  Rifer,  EPEAT 
operations  manager  at  the 
Green  Electronics  Council, 
said  PC  makers  that  are 
members  of  the  group  were 
involved  in  the  development 
of  the  rating  system.  Many 
took  part  because  they  were 
concerned  that  state  gov- 


Each  month, 
Kaiser  Permanente 
buys  about  5,000 
PCs  that  meet  the 
criteria  of  the  EPEAT 
environmental 
rating  system. 


ernments  might  adopt  their 
own  environmental  rules 
for  IT  purchases,  resulting 
in  a  hodgepodge  of  stan¬ 
dards.  “That  is  a  very  strong 
motivator  —  probably  the 
core  motivator  for  them  to 
be  engaged,”  Rifer  said. 

Some  PC  buyers  re¬ 
quire  ratings  higher  than  a 
bronze,  according  to  Rifer. 
Eor  instance,  he  said  that  the 
Canadian  government  man¬ 
dates  at  least  a  silver  rating 
on  products  and  gives  extra 
points  during  the  contract¬ 
ing  process  to  bidders  that 
have  gold  ratings.  ■ 
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It's  more  than  an  MFR  It's  a  portal  to  seamless  integration. 


I 


The  MX-Series  with  Sharp  OSA™  technology. 

The  MX-Series  is  your  portal  to  a  world  of  information.  Sharp  OSA  technology  allows  you  to 
integrate  and  access  your  back  end  systems  right  from  the  MFP's  large  LCD  touch  screen. 
It  even  lets  you  customize  your  MFP,  to  maximize  your  IT  investments  by  providing  new 
integrations  and  usability.  No  wonder  Sharp  MFPs  won  the  2006  BLI  "Color  Copier  Line  of  the 
Year"  and  the  "IT-friendly"  award.  The  MX-Series  is  more  than  a  multifunction  product,  it's  a 
multifunction  portal.  To  learn  how  you  can  seamlessly  integrate  Sharp  OSA  technology  into 
your  network,  visit  sharpusa.com/documents 
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VMs  Boost  SAN  Costs 


HE  LAW  of  unintended  consequences  is  rearing  its  head 
in  the  realm  of  server  virtualization,  says  Bryan  Semple, 
vice  president  of  marketing  at  Onaro  Inc.  in  Boston.  He 
claims  that  the  vast  majority  of  VMware  Inc.’s  ESX  server 
deployments  are  connected  to  SANs.  And  because  virtual 
machines  are  a  snap  to  create,  he  thinks  server  administrators  will  be 
tempted  to  install  them  willy-nilly  to  satisfy  end-user  demand  for  more 

Control  Your  VMs 

Virtual  machines  should  make  IT 
managers  nervous.  Yes,  they  save 
labor  and  hardware  costs  in  compa¬ 
nies  with  tight  data  center  budgets. 
Plus,  you  don’t  have  to  hassle  with 
Purchasing  to  get  new  hardware, 
and  you  can  roll  up  the  internal  IT 
bureaucratic  folderol  of  systems, 
network  and  security  administration 
into  one  job. 

But  that  “collapsing  of  business 
processes”  worries  Michael  Berman, 
chief  technology  officer  at  Catbird 
Networks  Inc.  in  Scotts  Valley,  Calif 
He  argues  that  VMware’s  Hypervi¬ 
sor  adds  two  problems  to  your  data 
center.  Specific  security  vulnerabili¬ 
ties  in  the  hypervisor  code  are  one 
thing,  but  Berman  says  the  second 
area,  change  control,  is  by  far  the 
more  critical.  He  claims  that  Cat- 


capacity.  However,  Semple  warns, 
each  time  a  VM  is  created,  “a  physi¬ 
cal  part  of  the  disk  on  the  SAN  is 
allocated.”  He  speculates  that  ad¬ 
ministrators  will  overprovision  SAN 
arrays  and  disks  in 
order  to  handle  the 
added  VM  load  on 
storage,  thus  un¬ 
dermining  the  cost¬ 
saving  argument 
for  VMs.  Naturally, 
Onaro  has  a  fix.  Its 
VM  Insight,  a  new 
module  for  its  SAN- 
screen  product  fam¬ 
ily,  will  ship  this  week.  Semple  says 
the  software  gives  admins  informa¬ 
tion  on  how  server  VMs  are  affecting 
storage  capacity  and  assist  with  plan¬ 
ning,  provisioning  and  other  storage 
services.  Pricing  for  SANscreen 
starts  at  $85  per  SAN  switch  port. 


Semple:  Watch  for 
overprovisioning 
of  SANs  with  VM. 


8B 


bird’s  new  HypervisorShield  service 
not  only  detects  hypervisor  vulnera¬ 
bilities,  but  also  lets  you  apply  corpo¬ 
rate  change-control  policies  to  your 
virtual  world  —  an  absolute  neces¬ 
sity  for  complying 
with  requirements 
for  separation  of 
duties  in  the  data 
center.  According 
to  Berman,  the 
new  service  “looks 
over  the  shoulder  of  the  virtual  ma¬ 
chine  administrator”  to  ensure  that 
everything  is  running  according  to 
Hoyle.  The  service  begins  today  at 
$18  per  month. 
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prediction 
for  the  VM  server 
in  2009. 


Welcome  the 
Plastic  Chip 


Hal  Bennet,  CEO  of  Third-Order 
Nanotechnologies  Inc.  in  Wilm¬ 
ington,  Del.,  says  his  company  has 
proved  in  the  lab  that  its  “hetero¬ 
cyclic  polymer”-based  technology 
can  “switch  light”  at  speeds  up  to 
lOOGbit/sec.  If  that  lab  work  can 
make  it  to  the  real  world,  in  a  few 
years  you’ll  be  buying  blazingly 
fast  network  gear  whose  core  intel¬ 
ligence  runs  on  plastic.  Although  he 
acknowledges  that  many  vendors 
“have  cried  wolf  in  the  past  about 
polymer  technology,”  Bennet  claims 
that  Third-Order  Nano  will  dem¬ 
onstrate  the  real 


As  in  The 
Graduate,  the 
future  is  plastic, 
says  Bennet. 


thing  in  Q_2  of 
this  year.  Why 
is  this  a  big  deal? 
According  to 
Bennet,  “silicon 
peters  out  at  lOG 
Ethernet,”  and  to 
get  to  higher  data 
rates,  you  need  ad¬ 
vanced  microproc¬ 
essor  technology 
—  such  as  gallium  arsenide,  which 
is  far  more  expensive  and  less  flex¬ 
ible  to  design  into  products.  He  adds 
that  a  polymer-based  Internet  infra¬ 
structure  would  boost  bandwidth  a 
thousand  times  but  shouldn’t  cost 
a  nickel  more.  “It’ll  be  a 
gigabit  spigot  for  30  bucks 
a  month,”  he  predicts.  That 
would  be  wonderful,  of 
course,  so  long  as  “hetero¬ 
cyclic  polymer”  isn’t  just  a 
technical  term  for  “wolf.”  ■ 
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Discover  and  discuss 
more  industry  action  at 
the  On  the  Mark  blog: 

coinputerworid.com/ 

blogs/hall 


J 


18  COMPUTERWORLD  JANUARY  14,  2008 


HP  StorageWorks  1200  All-in-One  Storage  System 

Integrated  file  serving,  data  protection  and  application  data  storage  in  a  single, 
affordable  system 

•  Duol-Core  Intel* Xeon*  Processor’ 

•  Microsoft  Windows  Storage  Server  2003  R2 

•  Up  to  9  TB  Capacity 


IS  FIVE  TOO  MANY 

Being  a  storage  expert  isn't  just  for  the  experts  anymore.- 
The  HP  StorageWorks  1200  All-in-One  Storage  System  is 
simple  to  use  and  can  be  implemented  in  less  than  ten 
mouse  clicks.  It's  the  first  storage  area  network  designed 
for  almost  everyone. 

Technology  for  better  business  outcomes. 


Alternative  Thinking  About  Storage:, 


Get  the  full  story  in  one  easy  click.  Visit  hp.com/go/storageutopia2 
1-888-490-8043 
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THE  GRILL 


Name:  William  ‘whurley’  Hurley 

Title:  Chief  architect  of 
open-source  strategy 

Organization: 

BMC  Software  Inc. 

Location:  Houston 

Favorite  movies:  The  Big 
Lebowski  and  Office  Space 

Previous  career  that  most 
people  don’t  know  about: 
Member  of  a  touring  funk  band; 
plays  guitar,  bass,  drums  and 
keyboards 

Wheels:  A  lime-green  2006 
Scion  XB 

Favorite  food:  Sushi  and  other 
Asian  cuisines 

Current  read:  The  Black  Swan, 
by  Nassim  Taieb 

Favorite  place  to  take  his 
11-year-old  son:  Dave  &  Buster’s 
arcade  and  sports  bar.  “He  loves 
the  zombie  games;  he  can’t  get 
enough  of  those.  And  he  loves 
winning  tickets  in  the  game 
machines.” 


William  Hurley  has  been  involved  in  IT 
for  more  than  half  his  life,  starting  after 
a  car  accident  that  left  him  badly  in¬ 
jured.  While  recovering,  he  began  hack¬ 
ing  XObjects  for  MacroMind  and  later 
Macromedia  Director  in  the  open-source 
multimedia  community.  He  then  went 
to  work  at  Apple  and  IBM  before  join¬ 
ing  a  string  of  start-ups.  Last  February, 
Hurley  joined  BMC  Software,  where  he 
is  combining  his  passion  for  open  source 
with  his  longtime  work  in  IT  systems 
management. 


William  Hurley, 
(aka  ‘whurley) 

BMC’s  chief  architect  of  open-source 
strategy  talks  about  community,  his 
role  as  a  connector  and  the  benefits 
and  limits  of  skateboard  politics. 


How  does  an  open-source  activist  end  up 
at  a  traditional  company  like  BMC?  They 
were  looking  for  an  open-source  leader 
who  could  say,  “Here’s  how  you  take 
a  company  that  for  27  years  has  done 
proprietary  software  and  integrate 
open  source  into  their  business  model 
in  every  way,  shape  and  form.”  This 
isn’t  about  trying  to  jump  onto  the 
open-source  marketing  bandwagon. 

It’s  about  directly  interacting  with 
customers  in  how  you  can  apply  open 
source  to  build  better  products. 

Continued  on  page  20 


18  COMPUTERWORLD  JANUARY  14.  2008 


^  It’s  the  ability  to  have  Microsoft®  Windows  Sifver®  and  SUSE®  Linux  Enterprise 

COLLABOMTION  from  Novell®  work  together.  And  the  ability  to  run  both  with  more  confid^ce. 

ROADMAP  It’s  Microsoft  and  Novell  working  together  to  reduce  costs  and  complexity  with  new 

. _ A _  solutions  for  virtualization,  directory  integration,  systems  management,  and  office  document 

translators — each  with  clearly  defined  intellectual  property  rights.  So  you  can  take  compromise  out  of 
the  data  center  and  put  simplicity  and  efficiency  in.  . 


Download  the  collaboration  roadmap  at  wuuw.moreinterop.com 


Novell.  Micmsoft 


Copyright  ©  2008  Novell.  Inc.  and  Microsoft  Corporation.  All  Rights  Reserved,  Novell,  the  Novell  logo  an^^USE  are  registered  trademarks  Of  Novell,  fnc..  in  the  United^ 
countries.  'Linux  is  a  registered  trademark  of  Linus  Torvalds.  Microsoft  and  Windows  Server  ape  trademarks  of  the  Microsoft  group  of  cornpahies.  ' 


■  THE  GRILL  I  WILLIAM  HURLEY 


UAs  a  systems 
dude,  I  think 
that  most 

large  systems  can  only 
be  changed  from  the 
inside. 


Continued  from  page  18 

I’m  a  guy  who  likes  a  challenge,  and 
even  with  the  support  of  the  manage¬ 
ment  team  that  I  have  here,  you’re  still 
talking  about  a  very  large  company,  a 
pretty  big  ship.  They  don’t  turn  on  a 
dime,  so  this  is  a  pretty  big  commit¬ 
ment  by  both  sides. 

The  company  has  been  working 
with  open  source  for  a  number  of 
years;  they  just  haven’t  been  bragging 
about  it.  [But]  there’s  a  huge  difference 
[between]  being  a  leader  of  a  com¬ 
munity  and  being  a  member  of  a  com¬ 
munity.  And  BMC  is  a  member  of  our 
community. 

How  have  you  been  able  to  bring  your 
community-based  thinking  into  BMC? 

When  I  was  working  in  open-source 
systems  management,  I  wanted  to 
change  the  world  of  systems  manage¬ 
ment  overall.  But  as  a  systems  dude, 

I  think  that  most  large  systems  can 
only  be  changed  from  the  inside.  So  to 
really  move  systems  management  for¬ 
ward,  and  my  career,  rather  than  doing 
a  start-up  and  trying  to  circumvent  ev¬ 
erything,  it  made  more  sense  to  find  a 
willing  partner  that  I  could  work  with, 
that  has  the  visibility,  that  has  the  re¬ 
sources,  that  is  the  establishment,  to 
kind  of  change  things  from  the  inside 
out.  That  sums  up  why  I  went  to  an 
established  player.  And  why  BMC? 
Because  the  management  team  gets  it. 
They  want  to  do  open  source  right. 

Is  open  source  being  looked  at  differently 
than  in  the  past  by  corporate  users?  I 

think  that  if  you  look  at  the  Richard 
Stallmans  and  the  Eric  Raymonds 
and  all  of  these  people,  that  was  kind 
of  like  Open  Source  1.0.  And  I  think 
there  [are]  a  bunch  of  people  trying 
to  commercialize  it,  now  that  there’s 
a  bunch  of  people  who  are  using  it  as 
a  marketing  ploy,  now  that  it’s  kind  of 
becoming  a  common  thing.  So  I  think 
there  [are]  going  to  be  new  leaders,  and 
I  think  those  new  leaders  are  not  going 
to  be  those  iconic  leaders  of  the  past. 
Rather,  they’re  going  to  be  more  con¬ 
nectors  —  people  who  sit  on  both  sides 
of  the  fence.  I  don’t  by  any  means  think 
I’m  the  only  one.  But  that’s  what  I  saw 
coming,  and  that’s  kind  of  where  I  put 
my  career. 

I  have  done  patents  in  the  past.  I 


have  worked  at  IBM.  I  have  managed 
large  groups.  I  have  managed  soft¬ 
ware  projects.  But  I’ve  always  at  the 
same  time  been  doing  open  source. 

My  career  has  developed  participat¬ 
ing  in  both  of  these  worlds.  The  thing 
I  always  say  is,  it’s  not  about  the  code; 
it’s  about  the  community.  It’s  the  way 
you  interact,  the  layer  that  you  create 
between  you  and  the  people  using  your 
product.  You’re  making  that  product 
with  them  rather  than  for  them. 

If  you  look  at  it  that  way,  then  you 
can  see  the  obvious  reasons  that  a 
company  like  BMC  would  be  interest¬ 
ed  in  being  the  first  to  jump  out  there. 

You’re  the  guy  known  for  riding  your  big 
green  skateboard  at  conferences.  How 
do  you  fit  in  at  BMC?  I  clean  up  rather 
nicely,  [but]  it’s  definitely  a  step  into  a 
different  direction  for  them. 

I  did  work  at  IBM  as  a  master  inven¬ 
tor.  I’ve  done  the  customer  proposals; 
I’ve  worn  the  suits.  It’s  not  that  I  don’t 
have  any  experience  in  that.  That  helps 
a  lot.  [And]  they’ve  been  very  open- 
minded.  They’re  ready  for  this  new 
open-source  energy  for  the  company. 

BMC’s  not  as  traditional  a  company 
as  you  might  think.  In  my  hallway, 
there  [are]  tons  of  people  in  flip-flops 
and  shorts.  The  executives  have  really 
turned  it  around  in  the  last  few  years. 
These  are  some  forward-thinking 
guys.  It’s  actually  not  hard  to  fit  in  with 
them  at  all. 

Does  that  skateboard  help  you  bridge 
the  gap  between  the  open-source  com¬ 
munity  and  traditional  IT  vendors  and 
customers?  Does  it  help  me  with  the 
open-source  community?  Absolutely 
not.  The  currency  in  the  open-source 
community  is  credibility. 

With  executives  —  I  went  with  one 
of  the  executives  at  BMC  to  meet  with 
a  customer  after  I  joined  the  company. 

I  was  wearing  a  jacket;  I  had  a  suit.  The 
BMC  executive  said,  “What  are  you 
doing?  What  are  you  wearing?”  They 
wanted  me  to  be  just  like  I  am  like  ev¬ 
ery  day,  because  the  expectation  with 
the  customer  was  that  I  would  be  dif¬ 
ferent,  that  it  would  be  refreshing.  That 
was  my  first  and  last  attempt  to  dress 
up  for  any  meeting  at  BMC.  I  think 
they  expect  me  to  be  different. 

—  Interview  by  Todd  R.  Weiss 
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IT  organizations  have  always  counted  on  the  performance  and  reliability  of  Fujitsu  PRIMERGY  servers. 
Thanks  to  Cool-Safe  technology,  they  can  count  on  lower  utility  bills  and  a  smaller  carbon  footprint, 
too.  Even  cooler,  our  new  PRIMERGY  TX1 20  tower  server  for  small  businesses  and  SOHOs  is  the 
smallest,  quietest,  most  energy-efficient  tower  server  on  earth.  And  you  don’t  even  need  an  on-site  IT 
staff  because  Fujitsu  PRIMERGY  servers  include  PRIMERGY  Server  View  Remote  Management 
software,  which  gives  outside  consultants  or  IT  staff  at  headquarters  all  the  secure  remote  access  they 
need.  How  cool  is  that?  To  find  out,  go  to  http://us.fujitsu.com/computers/PRIMERGY. 


HIGH  ENERGY-EFFICIENCY. 

A  Fujitsu  PRIMERGY  7X120  tower  ser^'er  with  a  DuahCore  hteF  Xeon^ 
UP  processor  uses  up  to  40  percent  less  power  than  previous  towers 


COOL-SAFE  TECHNOLOGY. 

Bigger  fans  and  independent  air  tunnels  improve  airflow,  so 
Fujitsu  PRIMERGY  servers  can  run  faster:  cooler,  and  quieter. 


See  us  at 
Computerworld's 
Premier  100  IT  Leaders 
Conference 
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^^^ltching 

Homeland  Security  is 
bankrolling  futuristic 
technology  to  nab 

terrorists  before 
they  strike. 


BY  ROBERT  L.  MITCHELL 
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'he  YEAR  is  2012.  As 
soon  as  you  walk 
into  the  airport,  the 
machines  are  watch¬ 
ing.  Are  you  a  tourist 
or  a  terrorist  pos¬ 
ing  as  one?  As  you 
answer  a  few  questions  at  the  security 
checkpoint,  the  systems  begin  sizing 
you  up.  An  array  of  sensors  —  video, 
audio,  laser,  infrared  —  feeds  a  stream 
of  real-time  data  about  you  to  a  com¬ 
puter  that  uses  specially  developed 
algorithms  to  spot  suspicious  people. 

The  system  interprets  your  gestures 
and  facial  expressions,  analyzes  your 
voice  and  virtually  probes  your  body 
to  determine  your  temperature,  heart 
rate,  respiration  rate  and  other  physi¬ 
ological  characteristics  —  all  in  an  ef¬ 
fort  to  determine  whether  you  are  try¬ 
ing  to  deceive.  Fail  the  test,  and  you’ll 
be  pulled  aside  for  a  more  aggressive 
interrogation  and  searches. 

That  scenario  may  sound  like  sci¬ 
ence  fiction,  but  the  U.S.  Department 
of  Homeland  Security  is  deadly  serious 
about  making  it  a  reality. 

Interest  in  the  use  of  what  some 
researchers  call  behavioral  profiling 
(the  DHS  prefers  to  call  it  assessing 
“culturally  neutral  behaviors”)  for  de¬ 
ception  detection  intensified  last  July, 
when  the  department’s  human  factors 
division  asked  researchers  to  develop 
technologies  to  support  Project  Hostile 
Intent,  an  initiative  to  build  systems 
that  automatically  identify  and  analyze 
behavioral  and  physiological  cues  as¬ 
sociated  with  deception.  That  project 
is  part  of  a  broader  initiative  called  Fu¬ 
ture  Attribute  Screening  Technologies 
Mobile  Module,  which  seeks  to  create 
self-contained,  automated  screening 
systems  that  are  portable  and  relative¬ 
ly  easy  to  implement. 

The  DHS  has  aggressive  plans  for 
the  technology.  There  will  be  an  initial 
demonstration  for  the  Transportation 
Security  Administration  (TSA)  early 
this  year,  followed  by  test  deployments 
in  2010.  By  2012,  if  all  goes  well,  the 
agency  hopes  to  begin  deploying  auto¬ 
mated  test  systems  at  airports,  border 
checkpoints  and  other  points  of  entry. 

If  successful,  the  technology  could 
also  be  used  in  private-sector  areas 
such  as  building-access  control  and  job 
candidate  screening.  Critics,  however, 
say  that  the  system  will  take  much 
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longer  to  develop  than  the  department 
is  predicting  —  and  that  it  might  never 
work  at  all. 

“It’s  a  good  idea  fraught  with  dif¬ 
ficulties,”  says  Bruce  Schneier,  chief 
technology  officer  at  security  consul¬ 
tancy  BT  Counterpane  in  Santa  Clara, 
Calif.  Schneier  notes  that  focusing  on 
suspicious  people  is  a  better  idea  than 
trying  to  detect  suspicious  objects. 

The  metal-detecting  magnetometers 
that  airport  screeners  have  relied  on 
for  more  than  30  years  are  easily  de¬ 
feated,  he  says. 

But  Schneier  thinks  that  the  technol¬ 
ogy  needed  for  Project  Hostile  Intent 
to  succeed  is  still  at  least  15  years  out. 
“We  can’t  even  do  facial  recognition,” 
he  says.  “Don’t  hold  your  breath.” 

But  Sharia  Rausch,  director  of  the 
DHS’s  human  factors  division,  says 
the  agency  is  already  seeing  positive 
results.  In  a  controlled  lab  setting,  she 
says,  accuracy  rates  are  in  the  range  of 
78%  to  81%.  At  that  rate,  the  tests  are 
still  producing  too  many  false  posi¬ 
tives,  however. 

“In  an  operational  setting,  we  need 
to  be  at  a  higher  level  than  that,”  says 
Rausch,  and  she’s  confident  that  results 
will  improve.  At  this  point,  though,  it’s 
still  unclear  how  well  the  systems  will 
work  in  real-world  settings. 

Current  research  focuses  on  three 
key  areas.  The  first  is  recognition  of 
gestures  and  so-called  microfacial 
expressions  —  a  poker  player  might 
call  them  “tells”  —  that  flash  across  a 
person’s  face  in  about  one-third  of  a 
second.  Some  researchers  say  micro¬ 
expressions  can  betray  a  person  when 
he  is  trying  to  deceive  someone. 

The  second  area  is  analysis  of  varia¬ 
tions  in  speech,  such  as  pitch  and  loud¬ 
ness,  for  indicators  of  untruthfulness. 

The  third  is  measurement  of  physi¬ 
ological  characteristics  such  as  blood 
pressure,  pulse,  skin  moisture  and  res¬ 
piration  that  have  long  been  associated 
with  polygraphs,  or  lie  detectors. 

By  combining  the  results  of  all  three 
modalities,  the  DHS  hopes  to  improve 
the  overall  predictive  accuracy  rate  be¬ 
yond  what  a  polygraph  —  or  any  other 
individual  indicator  test  —  can  deliver. 

That’s  not  a  very  high  bar.  The 
validity  of  polygraphs  has  long  been 
questioned  by  scientists,  and  despite 
decades  of  refinements,  lie-detector 
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Ethical 
Concerns 
May  Be 
Premature 

ASSUMING  THAT  the  system  gets 
off  the  ground,  Project  Hostile 
Intent  also  faces  challenges  from 
privacy  advocates.  Although  the 
system  would  use  remote  sensors 
that  are  physically  “noninvasive,” 
and  there  are  no  plans  for  the  infor¬ 
mation  to  be  stored,  the  amount  of 
personal  data  that  would  be  gath¬ 
ered  concerns  privacy  advocates 
-  as  does  the  possibility  of  false 
positives. 

“We  are  not  going  to  catch  any 
terrorists,  but  a  lot  of  innocent 
people,  especially  racial  and  ethnic 
minorities,  are  going  to  be  trapped 
in  a  web  of  suspicion,”  says  Barry 
Steinhardt,  director  of  the  Tech¬ 
nology  and  Liberty  Project  at  the 
American  Civil  Liberties  Union. 

But  Steinhardt  isn’t  really  wor¬ 
ried.  He  says  Project  Hostile  intent 
is  just  the  latest  in  a  long  string  of 
expensive  and  failed  initiatives  at 
Homeland  Security  and  the  TSA. 
“I’ve  done  hundreds  of  interviews 
about  these  [airline  passenger 
screening]  schemes,”  he  says. 
“They  never  work.” 

Steinhardt  adds  that  “hundreds 
of  billions”  of  dollars  have  been 
wasted  on  such  initiatives  since 
9/11.  “Show  me  it  works  before 
[we]  debate  the  civil  liberties  con¬ 
sequences,”  he  says. 


-  ROBERT  L.  MITCHELL 


test  results  remain  inadmissible  in 
court.  While  the  U.S.  Department  of 
Defense’s  Defense  Academy  for  Credi¬ 
bility  Assessment  (DACA;  formerly  the 
Polygraph  Institute)  puts  the  median 
accuracy  percentage  for  the  polygraph 
in  the  mid-80s  when  tests  are  properly 
administered,  others  say  that  number 
is  closer  to  50%  in  the  real  world  and 
that  the  results  depend  heavily  on  the 
skills  of  the  examiner. 

Schneier  goes  even  further.  He  says 
lie  detectors  rely  on  “fake  technology” 
that  works  only  in  the  movies.  They 
remain  on  the  scene,  he  says,  because 
people  want  them  to  work. 


The  presumption  that  combining  the 
predictive  results  from  tlie  three  areas 
being  studied  will  increase  predictive 
accuracy  is  also  untested. 

“We  can’t  find  any  indicators  that 
this  stuff  is  being  combined  [in  current 
research],”  says  Rausch.  “The  feeling  is 
that  [the  DHS  is]  doing  some  ground¬ 
breaking  stuff  here.” 

HEARING  LIES 

Many  researchers  are  already  tackling 
different  pieces  of  the  Hostile  Intent 
puzzle.  Julia  Hirschberg,  a  computer 
science  professor  at  Columbia  Univer¬ 
sity,  is  investigating  how  deception  can 
be  detected  by  picking  up  on  speech 
characteristics  that  vary  when  some¬ 
one  is  lying.  The  research,  funded  by  a 
DHS  grant,  has  identified  250  “acous¬ 
tic,  intonational  and  lexical  features” 
that  may  indicate  when  a  subject  is 
lying.  So  far,  the  best  accuracy  rate 
is  67%.  She  admits  that’s  “not  great,” 
but  it’s  better  than  human  observation 
alone,  she  claims. 

The  results  may  not  apply  to  a  real- 
world  context,  however.  Hirschberg’s 
work  is  based  on  lab  experiments 
in  which  the  subject  presses  a  pedal 
when  he  is  lying  and  machine-learning 
systems  process  the  results.  “It’s  not 
ideal,”  she  acknowledges. 

Moreover,  the  accuracy  rate  in  pre¬ 
dicting  deception  varies  with  cultural 
background  and  personality  type. 
Hirschberg  says  she  has  identified  four 
or  five  personality  types  that  could 
affect  how  the  results  should  be  inter¬ 
preted.  While  adjusting  for  personality 
type  might  improve  accuracy  in  cases 
where  the  type  can  be  identified,  it’s 
doubtful  that  interviewers  in  an  air¬ 
port  or  border  setting  will  have  the 
insight  necessary  to  do  so. 

Dimitris  Metaxas,  a  professor  of 
computer  science  in  biomedical  engi¬ 
neering  at  Rutgers  University,  has  re¬ 
ceived  funding  from  both  the  DHS  and 
the  DACA  to  use  technology  to  track 
and  interpret  the  meaning  of  micro¬ 
expressions  and  gestures.  “I’m  trying 
to  find  the  expressions  and  body  move¬ 
ments  that  are  not  normal  and  could 
be  linked  to  deception,”  he  says. 

While  Meta.xas  says  his  research 
focuses  on  movements  of  the  eyebrows 
and  mouth,  as  well  as  various  head  and 
Continued  on  page  26 
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_DAY  89:  Our  power  and  cooling  costs  are  out  of  control. 
We  spend  the  bulk  of  our  IT  budget  just  keeping  the  data 
center  cool.  I  told  Gil  we  need  to  go  green  in  a  big  way. 

_DAY  91:  Gil  took  us  green... kelly  green,  to  be  exact. 

_DAY  93:  You  don’t  go  green  with  paint.  You  go  green  with 
IBM  Cool  Blue™  technology  and  energy  management  services. 
Advanced  server  and  storage  virtualization  can  help 
consolidate  our  boxes  to  lower  energy  usage.  And  the 
new  IBM  P0WER6™  systems  help  us  use  less  energy  doing 
the  same  amount  of  work.^ 


.Our  data  center  will  be  green  now.  And  painted  white 
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■  COVER  STORY 


Truth,  Lies  and  MRIs 


JOEL  HUIZENGA  THINKS 
HE  HAS  FOUND  THE 
PERFECT  LIE  DETECTOR. 

While  traditional  polygraphs 
measure  physiological  char¬ 
acteristics  such  as  heart  rate, 
blood  pressure,  respiration 
and  skin  conductivity,  Huizen- 
ga’s  start-up  company  is  using 
a  magnetic  resonance  imag¬ 
ing  machine  (MRI)  to  watch 
what’s  happening  inside  the 
human  brain. 

More  than  80  years  after  its 
invention,  the  traditional  poly¬ 
graph  remains  controversial 
-  the  validity  of  its  tests  is  still 
questioned,  and  its  results  are 


inadmissible  in  court. 

But  Huizenga,  president 
of  No  Lie  MRI  in  San  Diego, 
thinks  he’s  invented  a  fool¬ 
proof  test. 

“To  lie,  you  have  to  stop  the 
truth  from  coming  out  and 
then  you  have  to  construct  the 
lie.  Those  two  things  can  be 
seen  in  the  brain,”  he  claims. 

Unlike  when  using  a 
polygraph,  an  interviewer 
doesn’t  have  to  interpret  MRI 
examination  results,  which 
are  processed  by  a  computer 
program. 

Because  it  tests  central 
brain  function  rather  than  auto¬ 


nomic  nervous  system  re¬ 
sponses,  the  system  can’t  be 
fooled,  Huizenga  says.  That 
assertion  has  yet  to  be  proved 
in  scientifically  validated  real- 
world  tests,  however. 

The  technique  is  based  on 
research  developed  at  the 
University  of  Pennsylvania 
and  funded  by  a  federal  grant. 

But  don’t  expect  to  see  the 
TSA  feeding  airline  passen¬ 
gers  through  MRI  tunnels  any¬ 
time  soon.  The  multimillion- 
dollar  machines  are  currently 
too  bulky  to  be  moved  easily, 
and  they’re  too  expensive. 

-  ROBERT  L.  MITCHELL 


Continued  from  page  24 
shoulder  gestures,  he  wouldn’t  be  more 
specific.  That’s  because  the  indicators 
that  he  is  interested  in  remain  secret. 

Although  the  DHS’s  Rausch  believes 
that  microexpressions  are  involuntary, 
she  doesn’t  want  people  to  know  ex¬ 
actly  what  expressions  the  agency  will 
be  measuring  —  just  in  case. 

“Every  system  can  be  broken,” 
Metaxas  points  out. 

OBJECTIONS  AND  OBSTACLES 

Skeptics  say  that  no  tech-based  sys¬ 
tem  will  work.  The  Ekman  Group  has 
trained  TSA  staffers  on  techniques 
to  help  them  recognize  and  interpret 
microexpressions.  The  Oakland,  Ca¬ 
lif.-based  consultancy  was  founded 
by  Paul  Ekman,  a  pioneer  in  research 
linking  microexpressions  to  deception. 
At  the  TSA,  trained  officers  use  the 
techniques  as  part  of  the  organization’s 
Screening  Passengers  Through  Obser¬ 
vation  Techniques  program. 

John  Yuille,  the  Ekman  Group’s 
director,  doesn’t  think  the  technique 
can  be  automated.  The  discipline  is 
a  “social  science,”  he  says,  and  micro¬ 
expressions  merely  represent  “clues  to 
truthfulness”  that  require  human  in¬ 
terpretation.  “Our  methodology  is  not 
amenable  to  technological  interven¬ 
tion,”  Yuille  says. 

Metaxas  says  that  what’s  holding 
him  back  at  this  point  isn’t  technol¬ 
ogy.  “The  basic  technology  to  track 
the  face.  I’ve  solved  that  problem,”  he 
says,  claiming  an  accuracy  rate  of  70% 
to  80%  with  cameras  positioned  at  dis¬ 
tances  up  to  nine  feet  from  the  subject. 
The  challenge  is  optimizing  the  algo¬ 
rithms  that  relate  those  expressions  to 
deception.  To  do  that,  he  needs  more 
data  from  psychologists. 

The  theories  linking  microexpres¬ 
sions  to  deception  are  largely  based  on 
academic  research  that,  while  tested 
in  lab  settings,  has  not  been  proved  in 
large-scale,  real-world  studies. 

Rules  must  also  be  applied  in  the 
correct  context.  Eor  example,  a  mea¬ 
surement  of  something  like  a  micro¬ 
expression  must  be  associated  with 
what  was  said  at  the  time,  and  the 
meaning  of  what  was  said  must  be  cor¬ 
rectly  interpreted,  says  Hirschberg. 
The  system  must  also  be  able  to  de¬ 
termine  whether  there  is  a  mismatch 


between  a  given  expression  or  gesture 
and  what  was  said.  “That  is  very  dif¬ 
ficult  [for  a  computer]  to  do,”  Hirschberg 
says,  so  in  the  lab,  the  matching  work 
has  been  done  manually. 

To  refine  the  algorithms,  Metaxas 
has  collaborated  with  Judee  Burgoon, 
a  professor  of  communication,  family 
studies  and  human  development  at  the 
University  of  Arizona.  She  says  the 
lack  of  rigorous  research  validating  the 
use  of  microexpressions  as  indicators 
of  deception  “gives  everyone  pause.” 

It’s  not  known  whether  micro¬ 
expressions  correspond  with  under¬ 
lying  emotions  or  whether  those  emo¬ 
tional  states  correspond  to  deception, 
Burgoon  says. 

While  it  is  believed  that  micro¬ 
expressions  are  involuntary,  it’s 
unclear  whether  subjects  can  “game 
the  system,”  as  they  have  done  with 
polygraphs.  And  many  researchers  in 
the  field  believe  that  indicators  of  de¬ 
ception  are  culturally  dependent.  That 
means  analysis  that  doesn’t  take  cul¬ 
tural  background  into  account  could 
amount  to  ethnic,  rather  than  behav¬ 
ioral,  profiling.  That’s  ironic,  since 
using  machines  to  analyze  the  data  is 
supposed  to  help  eliminate  biases  asso¬ 
ciated  with  human  decision-making. 

In  fact,  the  development  of  “cultural¬ 
ly  neutral”  indicators  is  a  stated  goal  of 
Project  Hostile  Intent.  Rausch  believes 
that  researchers  can  identify  micro¬ 
expressions  and  other  indicators  that 
are  universal,  or  “cross-cultural.”  That 
won’t  happen  in  time  for  the  initial  test 


systems.  But  by  2011,  says  Rausch,  the 
DHS  should  have  systems  ready  for 
testing  that  use  only  culturally  neutral 
indicators. 

For  Metaxas,  the  challenge  now  is  to 
prove  that  the  fundamental  assump¬ 
tions  linking  microexpressions  to  de¬ 
ception  are  correct.  “What  I  hope  I  can 
do  is  validate  and  verify  the  psychol¬ 
ogy,”  he  says.  To  do  that,  he  needs  to 
conduct  further  tests  involving  inter¬ 
views  in  real-world  situations.  But  that 
won’t  be  easy.  Privacy  and  security 
concerns  have  prevented  Metaxas  and 
other  researchers  from  monitoring  in¬ 
terrogations  or  conducting  interviews 
in  settings  such  as  airports  or  immi¬ 
gration  points. 

Even  the  DHS  faces  obstacles  in  test¬ 
ing  the  technology  in  the  field,  Rausch 
acknowledges.  And  in  real-world  test¬ 
ing,  Hirshberg  says,  there’s  another 
problem;  “You  don’t  really  know  when 
the  person’s  lying.” 

With  an  aggressive  timeline  for 
deployment,  Rausch  is  well  aware  of 
the  challenges,  and  she  cautions  that 
the  technology  is  far  from  complete. 
“We’re  very  much  in  a  basic  research 
stage,”  she  says. 

Even  if  Project  Hostile  Intent  ul¬ 
timately  succeeds,  it  will  not  be  a 
panacea  for  preventing  terrorism,  says 
Schneier.  The  risk  can  be  reduced,  but 
not  eliminated. 

“If  we  had  perfect  security  in  air¬ 
ports,  terrorists  would  go  bomb  shop¬ 
ping  malls,”  he  says.  “You’ll  never  be 
secure  by  defending  targets.”  ■ 


36  COMPUTERWORLD  JANUARY  14,  2008 


.INFRASTRUCTURE  LOG 


_DAY  84:  Feeling  really  disconnected.  We’re  not  getting 
the  most  out  of  our  existing  assets.  Service  and 
application  integration  is  a  nightmare.  We’ve  got  to 
stop  working  on  these  islands. 

.Please  rescue  me  from  this  lack  of  connectivity. 

.DAY  87:  We’re  saved!  With  IBM  WebSphere  solutions  we 
can  service-enable  and  connect  our  existing  assets  for 
mission-critical  goals.  Now  we  can  reuse  existing 
applications  and  save  money  by  eliminating  redundant 
systems.  We’re  ready  for  any  SOA  integration  project. 

.Plus,  no  more  jellyfish  stings. 


WebSphere 
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To  KEEP 
ahead  of 
the  eight 
ball  in  ’08, 
you’ll  need 
business 

knowledge,  a  keen  aware¬ 
ness  of  hot  technologies 
and  new  approaches,  and  a 
clear-eyed  understanding 
of  what  is  possible.  Here  are 
eight  hot  technologies  that 
experts  say  should  be  on 
your  front  burner  during  the 
year  ahead. 


1  VIRTUALIZATION.  IT  de¬ 
partments  have  been 
playing  with  virtual¬ 
ization  as  a  way  to  in¬ 
crease  hardware  utiliza¬ 
tion  and  flexibility  and 
help  control  costs,  but 
that  game  is  just  heat¬ 
ing  up,  says  Pamela 
Taylor,  a  solutions 
architect  at  a  subsidiary 
of  a  Fortune  50  company 
and  vice  president  of 
Share,  an  IBM  user  group. 
“Virtualization  is  only  go¬ 
ing  to  continue  to  expand, 
she  says. 


There  are  plenty  of  op¬ 
portunities  to  take  advan¬ 
tage  of  this  trend.  “The 
training  for  server  and  stor¬ 
age  virtualization  is  well 
under  way,”  Taylor  says.  If 
you  want  to  further  capital¬ 
ize  on  the  technology,  look 
at  expanding  virtualization 
beyond  servers  and  storage. 

“It’s  a  concrete  way  to 
rein  in  infrastructure  costs 
like  electricity  and  cooling 
costs,  to  rein  in  spending  on 
new  serv¬ 
ers  and  to 
start  to  do 
something 
that  really 


speaks  to  the  concern  about 
the  carbon  footprint,”  adds 
Taylor. 


2  AUTOMATION.  As  you 

implement  virtualiza¬ 
tion,  you  can  also  start 
capitalizing  on  automation. 
In  IT,  that  means  using  poli¬ 
cy  engines  that  decide  when 
to  do  various  tasks  within 
the  infrastructure. 

Automation  can  reduce 
human  errors,  cut  costs, 
increase  availability  and  add 
flexibility,  says  Jonathan 
Eunice,  an  analyst  at  Illumi- 
nata  Inc.  in  Nashua,  N.H. 

Consider,  for  example,  au¬ 
tomation  platforms  designed 
to  reduce  your  olf-hours 
power  drain  by  moving 
high-demand  applications 
onto  a  couple  of  servers  and 
shutting  down  the  rest  at 
night,  Eunice  says. 

“Automation  gives  you  a 
more  flexible  environment 
that’s  not  in  firefighting 
mode  all  the  time,”  he  says, 
noting  that  IT  departments 
using  automation  spend 
less  time  on  IT  grunt  work 
and  are  able  to  focus  more 
attention  on  strategic 
operations. 


Here’s  a  career  % 
to-do  list  for  / 
the  new  year. 

By  Mary  K.  Pratt 


And  though  today’s  auto¬ 
mation  tends  to  involve  the 
server,  storage  and  network 
aspects  of  the  data  center, 
it  will  spread  to  the  middle¬ 
ware  and  application  infra¬ 
structure  as  virtualization 
expands  there,  Eunice  says. 

Get  started  with  automa¬ 
tion  in  one  area  to  under¬ 
stand  how  it  works  and  the 
rewards  it  can  deliver,  he 
suggests. 

3  REAL-TIME  COLLABORA¬ 
TION.  Like  it  or  not, 
workers  throughout 
your  company  are  using 
outside  collaboration  tools 
such  as  Google  Docs.  That 
means  sensitive  corporate 
information  may  be  sitting 
on  outsider  servers  rather 
than  behind  your  firewalls. 

Workers  are  drawn  to 
these  tools  because  they’re 
easy  to  use,  says  Andrew 
McAfee,  an  associate  profes¬ 
sor  of  business  administra¬ 
tion  in  Harvard  Business 
School’s  Technology  and 
Operations  Management 
Unit.  IT’s  job  is  to  help  for¬ 
mulate  policies  for  use  of 
these  tools  or  to  implement 
internal  alternatives  that 
are  equally  user-friendly, 
he  says. 


4  WEB  2.0.  Lots  of 
people  spend  their 
personal  time  blog¬ 
ging  and  using  other  Web 
2.0  technologies.  Many  ex¬ 
pect  to  use  the  same  tools  at 
work,  and  some  are  already 
doing  so  —  with  or  without 
IT’s  blessing. 

IT  needs  to  be  a  leader  in 
championing  these  tools  by 
folding  them  into  the  exist¬ 
ing  infrastructure  in  a  way 
that  is  convenient  for  users 
and  works  with  corporate 
security  and  privacy  re¬ 
quirements,  McAffee  says. 

“The  smart  choice  for 
both  the  [business]  and  IT 
Continued  on  page  30 
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_DAY  69:  All  we  need  is  one  specific  piece  of  info. 

Gil  almost  had  it,  but  his  hand  cramped.  How  are  we 
supposed  to  find  trusted  business  information  when 
these  massive  volumes  of  conflicting  info  keep  pouring  in? 

_Gil  just  grabbed  a  stuffed  panda. 

_DAY  71:  The  answer:  IBM  solutions  for  leveraging 
information.  Now  we  can  cleanse  info  and  standardize  source 
data  fields  for  consistency  and  accuracy.  I  can  create 
a  single,  accurate  and  unified  record  of  info  across  our 
source  systems.  Everyone  can  make  better  decisions. 

_Just  in  time — I  think  we  ran  out  of  quarters. 


information  Management 


Download  the  Innovation  and  Competitive  Advantage  white  paper; 
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Continued  from  page  28 
side  is  to  be  positive  about 
this  development,”  he  adds. 

IDEATION.  The  knowl¬ 
edge  economy  grows 
on  good  ideas,  and  IT 
needs  to  provide  the  tools 
to  help  foster  and  manage 
them.  The  good  news  is  that 
such  tools  are  increasingly 
common.  “There  are  online 
tools  that  let  people  post 
ideas  and  work  on  each  oth¬ 
er’s  ideas,  and  we’re  seeing 
more  and  more  organiza¬ 
tions  put  together  platforms 
to  push  and  develop  ideas,” 
says  Jackie  Fenn,  an  analyst 
at  Gartner  Inc. 

But  IT  should  do  more 
than  implement  its  choice  of 
idea  management  software. 
Considering  that  most  in¬ 
novations  have  significant 
IT  components,  Fenn  says  it 
behooves  IT  workers  to  be 


MUie  smart 
choice 
for  both  the 
[business]  and 
IT  side  is  to  be 
positive  about 
[Web  2.0] 
deveiopment. 

ANDREW  McAFFEE, 

ASSOCIATE  PROFESSOR, 
HARVARD  BUSINESS  SCHOOL 


leaders  in  the  ideation  proc¬ 
ess.  You  can  help  manage 
the  process  by  working  with 
business  leaders  to  pose  and 
frame  the  right  questions 
to  get  useful  responses  and 
drive  innovative  thinking. 

CONSUMER-ORIENTED 
/  DEVICES.  Employees 

are  increasingly  bring¬ 
ing  their  own  hardware, 
software  and  wireless  de¬ 
vices  to  work,  says  Michael 
Gartenberg,  a  vice  president 


and  research  director  at 
JupiterResearch  LLC  in  New 
York.  “The  gadgets  that  con¬ 
sumers  are  buying  today  are 
more  powerful  than  the  PCs 
that  IT  had  to  manage  just 
a  few  years  ago,  and  IT  has 
to  be  able  to  respond  in  a 
positive  way  and  not  just  say 
no,”  he  says. 

That’s  not  to  suggest, 
however,  that  IT  should 
bless  everything  that  the 
cat  drags  in.  IT  must  under¬ 
stand  what  it  can  integrate 
and  support,  and  it  must 
know  what  could  put  the 
organization  at  risk.  “They 
need  to  be  prepared  to  inte¬ 
grate  some  and  ban  others,” 
says  Gartenberg,  who  is  a 
Computerworld  columnist. 

7  UNIFIED  COMMUNICA¬ 
TIONS.  Unified  com¬ 
munications  is  on 
many  IT  radar  screens,  and 
Gartner  says  most  compa¬ 
nies  will  implement  uni¬ 
fied  systems  over  the  next 
three  years.  But  moving  to 
unified  communications 
won’t  involve  just  telephony 
and  messaging,  says  Sam 
Helmich,  vice  president  of 
technology  at  ADM  Investor 
Services  Inc.  in  Chicago.  It 
means  tying  together  tra¬ 
ditional  telephone  features, 
desktop  videoconferencing, 
customer  relationship  man¬ 
agement  systems  and  other 
applications  to  improve 
efficiency  in  business  proc¬ 
esses. 

There’s  a  shortage  of 
skilled  workers  in  this  area, 
but  Helmich  says  that  com¬ 
panies  can  get  the  train¬ 
ing  their  workers  need  by 
partnering  with  vendors 
—  which  is  what  he  did  at 
his  company. 

If  that’s  not  an  option,  you 
can  still  get  started.  “There’s 
enough  stuff  on  the  Internet 
that  workers  can  go  out  and 
read  how  the  different  sys¬ 
tems  work,”  Helmich  says. 


Next  Up . . . 


TODAY’S  BLEEDING-EDGE 

technologies  will  soon  be  part  of 
the  corporate  infrastructure,  but 
there’s  always  something  new 
just  around  the  corner.  Gartner 
analyst  Jackie  Fenn  and  Eric 
Overby,  an  assistant  professor 
at  the  Georgia  Institute  of  Tech¬ 
nology’s  College  of  Manage¬ 
ment,  highlight  a  few  exciting 
technologies  in  the  pipeline; 

■  3-D  printing.  This  technol¬ 
ogy  functions  like  ink-jet  print¬ 
ing,  except  it  lays  down  a  physi¬ 
cal  material  that  builds  up  layer 
by  layer.  Using  3-D  printing, 
architects  could  build  models 
from  their  blueprints,  and  manu¬ 
facturers  could  build  prototypes 
from  their  product  designs.  In 
the  corporate  world,  IT  will  have 
to  integrate  3-D  printers  as  they 
do  existing  printers  and  today’s 
smart  copiers.  Technical  work¬ 
ers  might  even  be  called  upon 
to  develop  design  skills  to  help 
others  in  the  office  translate 
two-dimensional  designs  into 
3-D  plans. 

■  Infrastructure  installed 
on  mobile  robots.  Hospitals 
are  beginning  to  use  robots 
equipped  with  videoconferenc¬ 
ing  gear  to  enable  doctors  to 
interact  with  patients  even  if 


INTEGRATION.  IT  and 

business  departments 
have  been  building 
islands  of  applications  and 
data  for  years,  and  despite 
repeated  attempts  to  inte¬ 
grate  them,  many  of  those 
islands  remain.  But  busi¬ 
ness  demands  for  increased 
efficiencies  in  the  face  of 
exponential  increases  in  the 
quantity  of  data,  along  with 
the  development  of  new  in¬ 
tegration  tools,  should  make 
this  top  of  mind  for  IT  in 
’08,  Eunice  says. 

It’s  past  time  to  get  seri¬ 
ous  and  build  bridges  so  us¬ 
ers  can  get  all  the  informa¬ 
tion  they  need  in  one  place. 
“Whether  it’s  in  manufac¬ 
turing  or  health  care  or  any 


they’re  not  physically  together. 
These  robots  can  travel  from 
room  to  room  and  send  informa¬ 
tion  to  a  doctor  who  might  be 
busy  at  another  location.  This 
technology  eliminates  the  need 
to  install  duplicate  pieces  of 
expensive  equipment  in  every 
patient  room  and  the  need  to 
have  staffers  wheel  mobile 
equipment  from  patient  to  pa¬ 
tient.  Similar  technology  is  also 
being  used  in  large  warehouses, 
where  robots  receive  orders  and 
assemble  the  requested  materi¬ 
als.  "This  has  potential  any¬ 
where  you  have  a  large  physical 
plant,”  Fenn  says.  IT  needs  to  be 
prepared  to  integrate  this  equip¬ 
ment  into  the  infrastructure  as 
well  as  handle  the  wireless  and 
security  demands  that  come 
with  such  devices. 

■  Automated  continuous 
monitoring  systems  and 
other  data-collecting  tech¬ 
nologies.  Wearable  comput¬ 
ers  can  monitor  an  individual’s 
health,  and  RFID  chips  can 
track  a  product  throughout  its 
life.  How  companies  will  capital¬ 
ize  on  these  applications  is  still 
being  determined,  but  they  are 
just  over  the  horizon. 

-MARYK.  PRATT 


industry,  if  you  can  connect 
the  dots,  you  can  be  much 
more  efficient,”  Eunice  says. 

If  you’re  a  database  ad¬ 
ministrator,  an  applications 
author  or  a  business  analyst, 
you’re  on  the  hot  seat  here, 
because  you’re  the  one  who 
will  need  to  understand 
which  disparate  sets  of  data 
need  to  be  integrated,  he 
says,  adding,  “It  will  be  a  hot 
topic  for  the  next  10  years.” 

IT  shops  have  a  choice 
of  technology  to  do  the  job, 
Eunice  adds,  but  the  most 
important  decision  is  to  get 
started.  ■ 

Pratt  is  a  Computerworld 
contributing  writer  in 
Waltham,  Mass.  Contact  her 
at  marykpratt@verizon.net. 
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Take  the  business  continuity  assessment  at: 

IBM.COM/TAKEBACKCONTROL/READY 
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_DAY  8Z;  There  are  so  many  risks  out  there.  Traffic  spikes, 
natural  disasters,  mergers.  How  do  we  prepare?  One  in  three 
companies  don’t  recover  from  unplanned  downtime."  Would  we? 

_Gil  wrapped  everything  with  bubble  wrap.  Just  to  be  safe. 

_DAY  83:  I’m  preparing  with  IBM  Business  Resilience 
Solutions.  IBM  Business  Continuity  Services  help  us 
assess  our  risks  and  design  a  proactive  plan  to  deal  with 
them.  IBM  Tivoli  gives  us  the  visibility  to  diagnose  and 
fix  infrastructure  problems.  And  the  robust  availability 
features  of  the  IBM  System  p™  give  us  maximum  uptime. 

„No  more  bubble  wrap.  And  I  have  to  mail  a  package.  Great. 
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‘Ghost  Servers’ 
That  Haunt  Your 
Bottom  Line 

Who  ya  gonna  call?  By  D2UTell  Dunn 


RECENT  ASSET 
inventory  at 
Fujitsu  Services 
unearthed  a  lot 
of  old  memories 
—  and  not  the  good  kind. 

“We  had  IT  equipment  on 
the  floor  that  people  within 
the  company  thought  we  had 
gotten  rid  of  years  ago,”  says 
Mark  Scott,  global  data  cen¬ 
ter  delivery  manager  at  Fu¬ 
jitsu  Services  Holdings  PLC, 
one  of  the  largest  IT  services 
providers  in  the  world.  “We 
looked  deeper  and  found 
out  we  were  also  still  paying 
lease  and  maintenance  on  the 
equipment.  We  even  found 
that  we  were  paying  lease 
and  maintenance  on  equip¬ 
ment  that  had  been  removed 
from  our  data  centers.” 

Fujitsu  Services  isn’t 
alone.  So-called  ghost  serv¬ 


ers  are  haunting  bottom 
lines  everywhere.  Like 
electronic  zombies,  these 
forgotten  pieces  of  equip¬ 
ment  might  as  well  be  dead 
when  it  comes  to  improving 
business  results,  but  they 
are  very  much  alive  when 
it  comes  to  eating  up  IT 
budgets. 

The  unproductive  —  and 
usually  undocumented  — 

MWe  had  IT 
equipment 
on  the  floor  that 
people  within  the 
company  thought 
we  had  gotten  rid 
of  years  ago. 

MARK  SCOTT.  GLOBAL  DATA 
CENTER  DELIVERY  MANAGER. 
FUJITSU  SERVICES 


servers  take  up  valuable  real 
estate,  consume  increas¬ 
ingly  expensive  electricity 
and,  in  some  cases,  require 
ongoing  maintenance  and 
lease  payments. 

“You  can  find  ghost  serv¬ 
ers  in  a  lot  of  enterprises,” 
says  John  Phelps,  an  analyst 
at  Gartner  Inc.  “And  the 
larger  and  more  diverse  the 
company,  the  harder  it  can 
be  to  have  a  single  group  or 
technology  platform  that 
provides  control  over  all 
corporate  assets.” 

Based  on  case  studies  of 
two  large  corporate  data 
center  operations  and  analy¬ 
sis  of  anecdotal  reports  from 
many  customers.  Sun  Mi¬ 
crosystems  Inc.  maintains 
that  8%  to  10%  of  all  servers 
in  big  companies  have  no 
identifiable  function.  In  one 


■  SERVERS  AND 
DATA  CENTERS 

of  the  data  center  studies. 
Sun  found  150  ghost  servers 
in  an  installation  of  1,800.  In 
the  other,  it  found  354  ghost 
servers  in  an  installation  of 
3,500. 

One  of  the  companies 
studied  was  Sun  itself.  Sun 
used  system  performance 
tools  to  monitor  CPU  utili¬ 
zation  and  I/O  and  network 
traffic  over  the  course  of  a 
month  and  sorted  out  ma¬ 
chines  with  zero  utilization. 

Sun  removed  the  ques¬ 
tionable  servers  from  opera¬ 
tion  for  90  days  and  watched 
what  happened.  At  the  end 
of  the  period,  it  found  that 
60%  of  the  servers  could  be 
permanently  decommis¬ 
sioned,  says  Mark  Monroe, 
director  of  sustainable  com¬ 
puting  at  Sun.  The  company 
now  conducts  quarterly  re¬ 
views  of  utilization  rates. 

“It’s  hard  to  get  people 
to  admit  they  have  unused 
infrastructure,”  Monroe 
says.  “It’s  expensive,  waste¬ 
ful,  and  having  a  CIO  admit 
he’s  got  millions  of  dollars 
of  idle  assets  lying  around 
could  get  a  guy  fired.  I  think 
we  can  remove  some  of  the 
stigma  by  talking  about  the 
facts  and  having  people  re¬ 
alize  it’s  worse  just  to  leave 
them  lying  around.” 

The  cost  of  running  a 
server  for  three  years  exceeds 
its  original  acquisition  cost, 
so  keeping  the  ghost  servers 
around  has  an  easily  mea¬ 
sured  effect  on  energy  bud¬ 
gets.  Identifying  and  elimi¬ 
nating  such  wasted  resources 
are  key  components  of  green 
computing,  Monroe  says. 

Fortunately,  the  latest 
asset  management  and  con¬ 
figuration  software  can  help 
businesses  find  and  shut 
down  useless  machines. 

Fujitsu  Services  operates 
seven  Fujitsu-owned  data 
centers  in  the  U.K.  with  more 
Continued  on  page  34 
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For  you,  it’s  a  problem  you  didn’t  see 
For  your  business,  it’s  a  customer 


you  won’t  see  coming  back 


You  can’t  anticipate  every  problem.  But  Emerson  Network  Power  and  its 
Liebert  power  and  cooling  technologies  can  help  you  create  an  IT  infrastructure 
that  is  ready  for  anything— unplanned  outages,  unpredictable  growth  or 
unexpected  technologies. 

One  example  is  the  Liebert  NX,  a  software-scalable  UPS  that  can  double  in 
capacity  without  adding  or  modifying  hardware.  Download  our  white  paper, 
Powering  Change  in  the  Data  Center,  and  discover  what  Liebert  technologies 
can  do  for  your  operating  flexibility,  at  flexibility.liebert.com. 


Liebert  flexibility 

Just  another  reason  why  Emerson  Network  Power  is  the  global  leader 
in  enabling  Business-Critical  Continuity!" 


Network  Power 


Emerson,  Bu5iness-Critic.1l  Continuity  and  Liebert  are  trademarks  of  Emerson  Electric  Co.  or  one  of  its  affiliated  companies.  ©2007  Emerson  Electric  Co. 
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Eneroy  Costs: 

The  UHimate  Ghostbuster 


The  rising  cost  of  energy  is 
rousing  the  ghostbusters  at 
many  companies. 

In  August,  the  Environ¬ 
mental  Protection  Agency 
published  a  report  that 
documented  data  center 
power  usage.  It  found  that 
data  centers  in  the  U.S. 
consumed  about  60  billion 
kilowatt-hours  in  2006,  or 
about  1.5%  of  total  electric¬ 
ity  nationwide. 

The  EPA  points  out  that 


data  center  energy  use  has 
doubled  in  the  past  five 
years  and  is  expected  to 
double  again  in  the  next  five 
years  to  an  annual  cost  of 
about  $7.4  billion. 

The  agency  says  that  exist¬ 
ing  technologies  and  strate¬ 
gies  could  reduce  typical 
server  energy  use  by  25%, 
and  even  greater  savings 
are  possible  through  more- 
advanced  technologies. 

-  DARRELL  DUNN 


Continued  from  page  32 
than  200,000  square  feet  of 
floor  space,  and  it  manages 
11  customer-owned  facilities. 
Through  its  outsourcing 
business,  Fujitsu  Services  has 
acquired  data  center  facilities 
and  IT  equipment  from  a  va¬ 
riety  of  sources,  and  much  of 
the  equipment  came  with  no 
asset  or  configuration  man¬ 
agement  processes  in  place, 
says  Scott. 

The  company  had  previ¬ 
ously  used  a  configuration 
cataloging  system  that 
recorded  only  the  location 
of  equipment  on  the  floor, 
without  providing  any  in¬ 
sight  into  its  specific  use. 

But  Fujitsu  Services 
wanted  to  get  a  comprehen¬ 
sive  inventory  and  create  an 
asset  management  strategy 
that  would  allow  it  to  maxi¬ 
mize  existing  data  center 
space  and  continue  to  grow. 
So  in  2005,  the  company 


started  to  deploy  Aperture 
Technologies  Inc.’s  Vista 
data  center  resource  man¬ 
agement  system  —  and  then 
it  began  to  unearth  ghost 
servers  and  other  wasted 
resources. 

Since  then,  by  extend¬ 
ing  the  asset  management 
systems  across  its  entire 
U.K.-based  data  center  op¬ 
eration,  Fujitsu  Services  has 
reduced  its  operational  costs 
and  passed  the  savings  on  to 
customers,  Scott  says. 

For  example,  since 
customers  are  generally 
charged  for  the  floor  space 
they  use  within  the  data 
centers,  the  removal  of  un¬ 
productive  equipment  has 
allowed  Fujitsu  Services 
to  reduce  specific  hosting 
charges  for  them.  For  ex¬ 
ample,  Scott  says,  if  Fujitsu 
Services  can  reduce  the 
footprint  by  10%,  that  10% 
savings  can  be  passed  along 


to  the  customer. 

The  company  is  also  de¬ 
veloping  the  ability  to  invoice 
for  the  actual  power  required 
by  individual  customer  in¬ 
stallations,  instead  of  invoic¬ 
ing  for  power  based  on  the 


floor  space  used  by  the  serv¬ 
ers,  as  it  currently  does. 

“We  also  found  lots  of 
badly  installed  equipment,” 
Scott  says.  The  poor  instal¬ 
lation  processes  had  led  to 
what  he  characterized  as 


vulnerabilities  that  made  it 
difficult  for  his  company  to 
meet  customer  uptime  re¬ 
quirements. 

“The  result  was  really  that 
we  had  actually  built  vulner¬ 
abilities  into  the  operation,” 
Scott  explains.  “It  was  a  real 
wake-up  call.  We  now  have  a 
complete  vulnerability  check 
and  can  control  installations 
from  the  beginning  to  end.” 

Alticor  Inc.,  the  parent 
company  of  businesses  such 
as  Amway  Corp.,  Quixtar 
Inc.  and  Access  Business 
Group  LLC,  tracks  its  soft¬ 
ware  and  hardware  assets 
with  a  combination  of  man¬ 
agement  tools,  including 
BMC  Software  Inc.’s  Remedy 
Service  Management  and 
Hewlett-Packard  Co.’s  Sys¬ 
tems  Insight  Manager. 

In  2006,  using  the  soft¬ 
ware,  Alticor  found  that 
more  than  200  of  its  servers, 
or  about  a  third  of  its  650 


x86-processor-based  serv¬ 
ers,  were  running  at  utiliza¬ 
tion  rates  of  10%  or  less,  says 
Randy  Cast,  supervisor  of 
server  technology  at  Alticor. 

Even  scarier,  these  under¬ 
used  servers  had  accumulat¬ 
ed  over  the  previous  three 
years  without  the  IT  depart¬ 
ment’s  knowledge  as  equip¬ 
ment  was  bought  to  handle 
individual  applications  or 
affiliate  requirements. 

Working  with  virtualiza¬ 
tion  specialist  VMware  Inc., 
Alticor  has  embarked  on  an 
effort  to  consolidate  hard¬ 
ware  and  increase  overall 
utilization  rates  to  between 
60%  and  70%,  Cast  says. 

To  date,  Alticor  has  con¬ 
solidated  150  of  the  unpro¬ 
ductive  servers  onto  seven 
servers  using  virtualization 
software. 

Rockwell  Bonecutter, 
head  of  data  center  tech¬ 
nology  and  operations  at 


Accenture  Ltd.,  says  he  be¬ 
lieves  that  many  ghost  serv¬ 
ers  were  laid  to  rest  during 
corporate  Y2k  efforts.  In  the 
intervening  years,  however, 
there  has  been  a  significant 
growth  of  systems  that 
operate  at  5%  utilization  or 
less,  often  because  of  poor 
communication  and  asset 
management  within  the 
company. 

“When  it  comes  to  servers 
that  nobody  knows  about 
that  are  sitting  for  years  and 
nobody  has  touched,  there 
are  probably  examples  in 
every  IT  environment,  but 
it’s  obviously  impossible 
to  measure  what  you  don’t 
know  exists,”  Bonecutter 
says.  “It  is  not  unusual  to 
find  that  40%  of  all  servers 
on  a  floor  could  be  consoli¬ 
dated  and  virtualized  out  of 
the  environment.” 

But  consolidation  through 
virtualization  is  no  panacea. 


It  has  led  to  the  new  phe¬ 
nomenon  of  virtual  ghost 
servers.  The  ease  and  quick¬ 
ness  with  which  virtual 
servers  can  be  created  can 
leave  servers  cluttered  with 
numerous  poorly  document¬ 
ed  virtual  machines  that 
were  created  for  short-term 
or  now-abandoned  projects. 

Still,  believing  that  ghost 
servers  exist  and  knowing 
how  to  look  for  them  is  half 
the  battle.  With  tools  offer¬ 
ing  a  more  holistic  view  of 
assets,  and  policies  in  place 
to  guide  a  formal  decommis¬ 
sioning  process,  businesses 
can  now  reduce  the  risk  and 
associated  costs  of  ghost 
servers  —  without  needing 
to  call  the  ghostbusters.  ■ 
Dunn  is  a  freelance  reporter 
in  Fort  Worth,  Texas,  with 
20  years  of  experience  cover¬ 
ing  business  technology  and 
enterprise  IT.  Contact  him  at 
darrelldunn@sbcglobal.net. 


•  An  in-depth  overview  and  demo  of  Cognos  8  v3 

•  Rob  Ashe,  CEO,  Cognos:  “How  performance  management  innovation  drives  operational  and  financial  success” 

•  John  Hagerty,  VP,  AMR  Research:  “The  four  stages  of  performance  management  maturity” 

•  Cognos  customers:  Using  Cognos  8  v3  to  make  better  decisions 


When  you  see  Cognos  8  v3  in  action,  you’ll  understand  why  Cognos  is  the  best  choice  for  delivering  proven  business  intelligence 
and  planning  capabilities  to  all  types  of  users  across  your  mid-market  or  enterprise  organization. 


Register  for  the  live  event  in  New  York  City,  other  live  events  around  the  globe,  or  our  virtual  event  at  www.cognos.com/janl5. 


Proceed  with  confidence.™ 
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THE  NEXT  LEVEL  OF  PERFORMANCE’ 


On  January  15,  Cognos  will  unveil  the  building  blocks  for  better  decision  making. 

Join  us  at  our  exclusive  event,  “Performance  Management  for  Your  Real  World,  ”  as  we  launch  Cognos  8  v3,  the  foundation  for 
the  most  comprehensive  performance  management  system  available  today.  The  agenda  includes: 


B  SECURITY  MANAGER’S  JOURNAL  ’  MATHIAS  THURMAN 


An  Audit  Can  Be 
An  Opportunity 

If  the  auditors  pay  attention  to  the 
right  things,  you  might  be  able  to 
shake  loose  much-needed  funds. 


WHEN  I  was 
invited  to 
a  meeting 
to  discuss 
audits  and  saw  that  some 
representatives  of  a  Big 
Four  consulting  company 
would  be  there,  I  was  glad 
the  time  was  open  in  my 
schedule.  I  don’t  have  any 
money  in  my  budget  for 
external  audits,  much  as  I 
would  like  to,  and  I  wanted 
to  hear  what  was  being 
planned. 

At  the  meeting,  I  discov¬ 
ered  that  our  chief  finan¬ 
cial  officer  had  hired  an 
internal  auditor,  who 
then  received  a  nice  bud¬ 
get  for  some  external  au¬ 
dits.  Listening  to  the  new 
auditor  talk,  it  was  clear 
that  he  didn’t  know  much 
about  our  company,  and 
he  knew  nothing  about 
the  assessments  I  had 
conducted. 

I  filled  him  in  on  what 
I  did  and  also  noted  that 
the  last  time  our  company 
hired  a  Big  Four  firm  to 
conduct  a  risk  assess¬ 
ment,  we  ended  up  with 
some  nice-looking  bind¬ 
ers,  which  are  currently 
collecting  dust  in  several 
offices  around  the  com¬ 
pany.  Of  course,  we  got 


more  out  of  the  assessment 
than  that.  For  example, 
we  got  a  soft  copy  of  the 
report,  which  I  posted  on 
the  intranet.  Although  Fve 
announced  its  availability 
many  times,  no  one  has 
ever  accessed  it. 

With  such  a  dismal 
result  last  time,  why  am 
I  so  keen  for  another  ex¬ 
ternal  audit?  Because  Fve 
decided  to  take  a  different 
approach  this  time.  Rather 
than  have  someone  get  big 
bucks  to  tell  me  something 
I  already  know,  I  want 
to  steer  this  audit  into 
directions  that  will  ac¬ 
celerate  some  initiatives 
regarding  intellectual 
property  (IP)  protection. 

I’ve  been  trying  for 
some  time  now  to  get 
valuations  of  our  IP.  So 
far,  I  haven’t  been  able 
to  get  the  lines  of  business 
to  take  the  time  to  assess 
the  value  of  the  IP  they 
are  responsible  for.  What 
sort  of  financial  hit  would 

fl  The  last  thing 
I  need  is  another 
external  audit  tell¬ 
ing  me  things  that 
I  already  know. 


we  take  if  some  of  the 
company’s  source  code, 
design  documents  or 
service  manuals  were 
lost  or  stolen?  (I’ve  writ¬ 
ten  about  some  of  this 
before.)  I  know  that  the 
consequences  wouldn’t  be 
pretty,  but  I  don’t  have  any 
real  numbers. 

DIFFERENT  APPROACH 

I  want  this  audit  then  to 
identify  our  most  critical 
and  valuable  data.  If  our 
CFO  is  willing  to  spend 
upward  of  $40,000  for 
this  audit  engagement,  the 
business  divisions  will 
surely  take  the  time  to 
meet  with  the  consultants. 

I  want  the  auditors  to 
come  back  with  a  report 
that  identifies  critical  IP 
and  places  a  monetary 
value  on  that  data.  Then  I 
would  like  them  to  evalu¬ 
ate  our  ability  to  protect 
that  data.  I  know  that 
they  will  find  that  our 
IP  resides  in  many  data 
repositories,  including  net¬ 
work  file  shares  (on  both 
Unix  and  Windows),  tape 
drives,  SANs,  local  desk¬ 
tops,  e-mail  attachments 
and  public  folders. 

What  I  hope  to  come 
away  with  instead  of  dusty 
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Trouble 

Ticket 

ISSUE:  There’s  no 
funding  available  for 
a  monitoring  tool  that 
could  help  ensure  that 
IP  doesn’t  wind  up  in  the 
wrong  hands.'- 

ACTION  PLAN:  “Steer” 
an  external  audit  so  the 
report  shows  how  essen¬ 
tial  this  tool  is. 


binders  is  a  comprehen-  J 

sive  report  that  says  that  J 

because  of  the  nature  of  I 

our  business  and  corporate  I 

culture,  we  would  face  a  ' 

logistical  nightmare  in  [ 

trying  to  consolidate  criti-  \ 

cal  IP  in  a  single  location.  1 

I  expect  that  the  auditors  I 

would  then  suggest  a  i 

compensating  control  of  j 

monitoring  our  network  J 

for  IP  loss.  I 

The  payoff  would  be  I 

getting  funding  to  expand  i 

our  installation  of  an  IP  *  j 

leakage-detection  tool  [ 

from  Mountain  View,  1 

Calif.-based  Reconnex.  ! 

Right  now,  we  have  one  > 

Reconnex  sensor,  and  that  j 

just  isn’t  sufficient  to  moni-  \ 

tor  a  network  as  large  and  I 

complex  as  ours, 

,  ,  I  COMPUTERWORLD.COM ; 

I  ve  asked  - 

for  additional  P. 

To|oin  the  discussions 

funds,  but  I  just  about  security,  go  to 

havpn’fhppn  I  computerworld.com/ 

naven  t  oeen  blogs/security 

able  to  shake  any 

loose,  since  the  company  • 

is  in  cost-cutting  mode.  [ 

Upper  management  feels  | 

that  our  money  would  be  I 

better  spent  in  generating  I 

additional  sales.  This  audit  ' 

I 

report  should  show  that  j 

we’re  being  foolish  not  to  I 

protect  what  we  already  1 

have.  ■  I 

This  week’s  journal  is  writ-  i 

ten  by  a  real  security  man-  j 

ager,  “Mathias  Thurman,”  | 

whose  name  and  employer  \ 

have  been  disguised  for  ob-  I 

vious  reasons.  Contact  him  i 

at  mathias_thurman@  • 

yahoo.com.  J 


How  safe  is  your  critical  data? 

If  you  have  to  ask,  you  may  want  to  call  CDW. 


SMART  BUY  -  INSTANT  SAVINGS' 
Hard  drives  sold  separately 


HP  ProLianf  DL380  G5 
Rack-mount  Server 

•  Memory:  2GB  std.,  32GB  max.  (PC2-5300) 

•  Hard  drives;  none  ship  std.;  up  to  eight  hot- 
pluggable  SAS  hard  drive  bays  (576GB) 

•  AMB- Level  2  cache 

•  Embedded  Dual  NC373i  Multifunction  Gigabit 
network  adapters 

•  Redundant  fans 

Quad-core  I ntePXeon® Processors  5345  (2.33GHz) 
$2299  CDW  1266331 

HPCare  Pack,  Three-year,  four-hour,  13  x  5,  onsite 
$679.99  CDW  675084 


invent  Quad-cote. 

Unmalc^e(>. 


rf.#-.'.-..,-.  .;4  .viS  •  .  ,> 

■  -  .  M  4  _ _ 

Hard  drives  sold  separately 


HP  StorageWorks®  70 
Modular  Smart  Array 

•  End-to-end  flexible  storage  array,  offering 
data  availability,  enhanced  reliability, 
enhanced  performance  and  tiered  storage 
capability  with  SAS  and  SATA  drives  and 
investment  protection. 

•  Flexible  platform  allowing  you  to  buy  what 
is  needed  today  and  purchase  additional 
capacity  as  data  storage  needs  grow,  instead 
of  making  a  large  up-front  investment. 


HP  R3000  UPS 


•3000VA,  2700  watts 

•  Enterprise-wide  intelligent  manageability  with 
bundled  HP  Power  Manager  management 
software 

•  Transformer-less  technology 

•  Rack-mount  kit  included 

•  Support  for  Remote  Emergency  Power  Off 
(REPO)  circuitry 


invent 


$351999 

CDW  1126579 


invent 


$146299 

CDW  1000446  ■ 
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We're  there  with  the  storage  solutions  you  need. 

There  are  plenty  of  threats  to  your  data,  and  each  one  has  the  potential  to  do  more  than  give  you  a  headache. 
That's  why  it's  essential  to  have  a  disaster-recovery  plan  in  place  to  protect  your  data  and  business  from 
the  unexpected.  At  CDW,  we're  there  with  a  wide  range  of  products  to  help  you  design  a  disaster-recovery 
solution.  We  have  the  expertise  to  answer  questions  and  get  you  a  custom  configured  solution  before  you 
need  it.  So  call  CDW  today.  Because  being  prepared  for  the  worst  is  probably  the  best  thing  you  can  do. 


CDW.com 


800.399.4CDW 


HP  Smart  Buy  instant  savings  reflected  in  advertised  price;  HP  Smart  Buy  instant  savings  is  based  on  a  comparison  of  the  HP  Smart  Buy  price  versus  the  standard  list  price  of 
an  identical  product:  savings  may  vary  based  on  channel  and/or  direct  standard  pricing;  for  complete  information,  visit  CDW.com/rebates  or  call  your  account  manager.  Offer 
subject  to  CDW's  standard  terms  and  conditions  of  sale,  available  at  CDW.com.  <5)2008  CDW  Corporation 


The  Right  Technology.  Right  Away 


m  OPINION 

Bail  Perkins 

Follow  the  Loser 


IF  ONE  of  your  New  Year’s  resolutions  is  to  find  a  new 
job,  consider  an  often-overlooked  criterion:  the  reputa¬ 
tion  of  your  predecessor.  You  might  want  to  pass  up 
the  post  that  was  previously  filled  by  an  individual  who 
was  valued  and  respected.  Instead,  choose  the  job  where  your 
predecessor  was  perceived  as  a  failure.  You  will  work  harder 


during  your  first  year  (to 
fix  existing  problems  and 
rebuild  IT’s  credibility), 
but  you’ll  have  a  better 
chance  of  succeeding  in 
the  long  run. 

If  your  predecessor  was 
held  in  low  esteem,  you 
start  the  job  with  multiple 
advantages.  Here  are  some 
things  you  can  do: 

Capitalize  on  quick  wins. 
Most  IT  organizations 
have  overlooked  oppor¬ 
tunities  to  save  money 
or  improve  service.  If 
your  predecessor  was  in¬ 
competent,  distracted  or 
scrambling  to  save  his  job, 
he  probably  ignored  some 
opportunities.  Follow  the 
money.  A  careful  review 
of  IT  spending  and  service 
levels  may  reveal  oppor¬ 
tunities  for  consolidation, 
renegotiation  or  other 
improvements.  Remember 
to  include  outsourcing 
agreements  in  your  review. 
(Successful  predecessors 
typically  leave  fewer  op¬ 
portunities  for  these  quick 
improvements.) 

Blame  problems  on  your 
predecessor.  For  the  first 


six  months,  you  get  to 
blame  any  problems  on 
the  idiot  you  replaced  and 
(rightly)  claim  that  you  are 
just  cleaning  up  the  mess¬ 
es  he  left.  Use  this  honey¬ 
moon  period  to  create  an 
objective  assessment  of  de¬ 
partmental  strengths  and 
weaknesses.  This  baseline 
will  serve  as  a  valuable  ref¬ 
erence  point  for  measuring 
your  progress  in  future 
years,  even  if  you  have  not 
fixed  every  problem. 

Rebuild  the  IT  team.  If 
your  predecessor  was  an 
incompetent  leader,  some 
changes  will  probably  be 
required.  Your  best  staff¬ 
ers  may  be  jumping  ship, 
and  people  who  opt  to  stay 
may  be  in  the  wrong  jobs. 
If  IT’s  reputation  has  been 
tainted,  you  will  likely  get 
support  for  reorganizing 
your  department  or  hiring 

■  If  your  predeces¬ 
sor  is  considered 
a  failure,  you  are 
granted  credibility 

Just  because  you 
lave  a  pulse. 


additional  staffers.  And 
you  will  probably  get  both 
sympathy  and  action  from 
human  resources  execu¬ 
tives  and  others.  (Follow¬ 
ing  a  successful  predeces¬ 
sor  gives  you  less  freedom 
to  change  the  organization 
or  the  people.) 

Ask  hard  questions.  As  a 
newcomer,  you  have  an  op¬ 
portunity  to  question  ev¬ 
erything.  For  example,  you 
can  ask  to  see  the  business 
case  and  the  work  plan 
for  the  sacred-cow  project 
that  has  gone  in  the  ditch. 
If  business  imperatives 
have  changed  or  the  proj¬ 
ect  appears  destined  for 
failure,  pointed  questions 
can  help  obtain  the  neces¬ 
sary  buy-in  to  restructure 
or  cancel  the  effort. 

Gain  instant  credibility. 

If  your  predecessor  is 
considered  a  failure,  you 
are  granted  credibility  just 
because  you  have  a  pulse. 
Then  you  can  earn  real 
credibility  over  time  by 
helping  others  solve  their 
problems.  Listen  carefully 
for  the  most  frustrating 
problems,  both  inside  and 


outside  the  IT  organiza¬ 
tion.  Any  improvements 
help  boost  your  credibility 
rating. 

Acquire  necessary  re¬ 
sources.  Managers  who 
are  viewed  as  incompetent 
often  have  a  hard  time  get¬ 
ting  sufficient  budget,  head 
count  or  authority.  They 
often  have  even  reasonable 
resources  withheld,  and  the 
results  can  be  disastrous. 
One  organization  I  worked 
with  was  so  suspicious 
of  its  CIO  that  money  for 
routine  server  upgrades 
was  repeatedly  denied.  As 
servers  reached  capacity, 
service  levels  decreased 
and  further  reduced  IT’s 
credibility.  The  new  CIO 
was  able  to  negotiate  the 
required  budget  easily. 

If  your  predecessor  was 
viewed  negatively,  the  IT 
organization’s  reputation 
may  be  badly  tarnished. 
Initially,  this  may  be  un¬ 
comfortable,  but  it  can 
work  to  your  advantage. 
Investigate  the  company’s 
perception  of  your  pre¬ 
decessor  before  taking  a 
new  job.  You  can  leverage 
someone  else’s  past  in¬ 
competence  into  your  own 
personal  success  and  an 
improved  IT  organization. 
For  long-term  success, 
don’t  play  follow  the  leader 
—  play  follow  the  loser.  ■ 
Bart  Perkins  is  managing 
partner  at  Louisville,  Ky- 
based  Leverage  Partners 
Inc.,  which  helps  organiza¬ 
tions  invest  well  in  IT.  Con¬ 
tact  him  at  BartPerkins@ 

I  LeveragePartners.com. 
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The  Industry's  Most  Open, 

Versatile  Enterprise  Blade  Platform 

The  Sun  Blade™  6000  system  delivers  the  fastest  performance,  ease 
of  scalability  and  energy  efficiency  —  and  features  UltraSPARCf 
AMD  Opteron™  and  Intel®  Xeon®  processors.  Run  any  major  operating 
system  anywhere  in  the  datacenter,  all  with  the  server  that's 
revolutionized  the  blade  category. 

For  25%  off  a  Sun  Blade  Starter  Kit  or  for  information  on  a  free 
6o-day  trial,  go  to  sun.com/getsunblades. 


AMDrt 


Opteron 


ULTRASPARC 


soiaris 


microsystems 


Call  your  local  Sun  Sales  Representative,  Sun  Authorized  Partner  or  (888)  516-9362. 

©  2007  Sun  Microsystems,  Inc.  All  rights  reserved.  All  logos  and  trademarks  are  property  of  their  respective  ov/ners. 
Benchmark  information  can  be  found  at  sun.eom/servers/blades/6000/benchmarks. 
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A  Job  Hopper’s 
Market 


In  her  Sept.  12  column  in  Psychology  To¬ 
day,  Judith  Sills  notes  that  HR’s  attitude  toward 
those  whose  r^sum^s  show  a  tendency  to  move 
'  v  t  around  a  lot  has  changed  over  the  years. 

“A  person  who  stays  with  the  same  company 
for  more  than  five  years  -  without  signs  of  sky¬ 
rocketing  upward  -  might  trigger  suspicions. 
Why  isn’t  he  interested  in  making  more  of  a  con¬ 
tribution?  Is  he  just  looking  to  milk  the  company 
for  what  he  can  get  for  as  long  as  he  can  get  it?” 

She  goes  on  to  say  that  we  all  tend  to  mix  periods  of  stabil¬ 
ity  and  mobility,  depending  on  the  opportunities  we  encoun¬ 
ter.  But  it  does  seem  less  advisable  today  to  stay  put  in  one 
job  for  an  extended  period  than  it  did  a  decade  or  two  ago. 


$53,051 


Average 
salary  offer 
that  college 
graduates  with  computer  science  majors 
received  in  2007,  according  to  survey  results 
from  the  National  Association  of  Colleges  and 
Employers. 


Talk  to  Me 

Gen  Y  employees  were  asked,  “How  frequently  do 
you  prefer  to  communicate  with  your  boss?” 


Several  — 
times  a  day 


Don’t 
know:  5% 


Less  than  once 
a  week:  7% 


Once  a  day 


Several 
times  a  week 


Once  a  week 


Source:  Q2  2007  Web  survey  of  1.007  full-  and  part-time  workers  between 
the  ages  of  21  and  28,  conducted  by  Robert  Half  International  and  Yahoo  Hot  Jobs 


■  Q&A 

Eric  Mosley 

The  CEO  of  Globoforce  Inc. 

talks  atx)ut  the  ins  and  outs 
of  employee  recognition. 


Don’t  employees  really  want 
cash  above  all  else?  Sure.  In 
a  blind  survey,  employees  will 
predominantly  say  that  they  want 
cash.  However,  they  will  also  say 
that  they  want  a  30-hour  work¬ 
week  and  no  at-risk  salary  compo¬ 
nent!  What  is  important  is  that  an 
employer’s  compensation  strategy 
creates  an  environment  in  which  all 
employees  are  engaged  and  work¬ 
ing  toward  a  common  goal.  A  total 
rewards  strategy  will  have  many 
components,  including  salary, 
benefits,  commissions,  rewards 
and  bonuses. 

I  suppose  it  would  be  memo¬ 
rable  to  receive  an  iPod  from 
my  employer,  even  with  the 
company  logo  engraved  on  the 
back,  but  aren’t  some  employ¬ 
ees  likely  to  say,  “Look,  I’ve 
already  got  three  iPods.  What 
I  need  is  money  for  my  kids’ 


education”?  If  an  employee  says 
that,  then  it  most  likely  arises  from 
a  salary  issue  rather  than  a  rewards 
issue.  It  is  important  to  have  a  clear 
delineation  between  the  corporate 
budget  used  for  salary,  benefits 
and  rewards.  And  each  of  these 
should  be  paid  using  a  separate 
“currency,”  which  should  be  associ¬ 
ated  with  its  central  purpose.  In  the 
area  of  health  benefits,  this  would 
be  medical  insurance;  in  the  area 
of  rewards,  this  could  be  a  portfolio 
of  low-value  awards  used  to  say, 
“Thank  you  for  a  job  well  done." 

What’s  the  single  greatest 
noncash  reward  you’re  aware 
of,  in  terms  of  satisfying  the 
recipient  and  meeting  the  em¬ 
ployer’s  goals?  It  is  a  common 
misconception  that  all  employees 
can  be  provided  with  a  single  gift 
that  they  will  all  be  satisfied  with.  It 
is  essential  that  today's  employer 
accept  the  fact  that  their  workforce 
consists  of  individuals  who  are  also 
consumers.  This  is  especially  true 
in  the  global  workplace,  where  em¬ 
ployees  are  dispersed  across  the 
globe.  The  solution  is  to  give  locally 
relevant  choices  in  the  form  of  a 
local  shopping  experience  where 
an  employee  can  choose  the  award 
that  best  suits  them  and  their  local 
marketplace. 

-JAMIE  ECKLE 


81% 


Percentage  of  participants  in  a 
Globoforce  webinar  last  Sep¬ 
tember  who  said  they  believe 
recognition  programs  are  integral  to  recruiting  top 
talent.  Participants  were  70  HR  professionals  and 
business  leaders  from  Fortune  500  companies. 

/  Percentage  of  respondents 
who  said  that  disengaged 
employees  lead  to  poor- 
quality  work  and  decreased  productivity. 
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careers 


IT 


W.  J.  Trading  Enterprises,  Inc. 
seeks  degreed  and  experi¬ 
enced  Database  Specialist  to 
work  in  Houston,  Texas.  Plan 
and  coordinate  changes  to 
company  financial  and  account¬ 
ing  databases,  develop  and 
implement  the  databases 
applying  knowledge  of  data¬ 
base  management  systems. 
Fax  resume  to  John  Yang  at 
713-513-5266  or  email  to 
hr@wjtrade.com.  Put  job  code 
DS  001  on  resume. 


Multiple  IT  posi¬ 
tions  open  for 
Apollo  Group. 
Send  resume  to: 
Pat.Branum@pho 
enix.edu 


COMPUTER  Systems 
Analyst:  IT  consulting 
company.  Exp  with  Unix, 
Ab  Initio,  SQL  and  Java 
req'd.  US  travel  req'd. 
Resume  att:  V.  Pulipati, 
Banyanside  Inc,  11501 
Dublin  Blvd,  Suite  200, 
Dublin,  CA  94568  or  Fax 
(925)215  4525 


IT  Corp.,  Aliso  Viejo,  Orange 
County,  CA  and  at  unantici¬ 
pated  client  sites  across  the 
U.S.  has  openings  for 
Software  Engr.,  System/ 
Programmer  Analyst,  Project 
Leader/Manager,  Biz  Dev 
Consultant  and  Biz  Analyst. 
Mail  resume  and  position 
desired  attn  to  HR-  Jude 
Patrick  James,  UST  Global 
Inc.  120  Vantis  Ste  500  Aliso 
Viejo  CA  92656. 


Software  Project  Manager 
w/Masters  or  foreign  equiv  in 
Comp  Sci  or  Engg  or  Math  &  1 
yr  exp.  'Will  accept  Bach  or  for¬ 
eign  equiv  &  5  yrs  of  progressive 
work  exp  in  lieu  of  Masters*  or 
foreign  equiv  &  1  yr  exp.  Plan, 
organize,  direct,  coord.  Java, 
J2EE,  SOA,  Web  services, 
LDAP,  JSP,  Servlets,  Struts, 
DHTML,  Oracle,  MDA,  ORM 
technologies  based  s/w  dev  pro¬ 
jects,  Manage  projects  &  QA  of 
projects.  Dsgn,  dvip  &  maintain 
s/ware  applies  using  industry's 
standard  OOA&D  techniques, 
SDLC  principles  &  s/ware  dsgn 
patterns.  Track  comprehensive 
project  plans  using  MS  Project. 
Supv  2  Prgmrs.  Exp  prior  to 
completion  of  education  accept¬ 
able.  Mail  res  to:  Mascon  Global 
Consulting  Inc.,  220  Old  New 
Brunswick  Rd,  Ste  #101, 
Piscataway,  NJ  08854.  Ref 
#001.  Job  Loc;  Piscataway,  NJ 
or  in  any  unanticipated  Iocs  in 
the  USA 


Computer  Professional  (Bristol 
PA)  IT  firm,  Jr.  LvI  positions: 
Programmer  Analysts,  S/w 
Eng,  Sys  Analysts,  Business 
Analyst,  Database  Admins  to 
dvIp,  create  &  modify  general 
comp,  applications  s/w  or 
specialized  utility  programs. 
Analyze  user  needs  &  dvip 
S/w  solutions. 

Sr.  LvI  positions;  Sr. 
Programmer  Analyst,  MIS  Mgr, 
IT  Mgr,  Sr.  S/w  Eng,  ITS  Director 
to  plan,  direct  or  coordinate 
activities  in  such  fields  as  elec¬ 
tronic  data  processing,  information 
systems,  System  Analysis, 
Business  Analysis  &  comp. 
Programming.  Apply  w/2  copies 
of  resume  to  H.R.D,  Synchron 
Systems  Inc.  1250  Veterans 
HWY,  G16,  Bristol,  PA  19007. 


Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements  to 
determine  feasibility  of  design; 
direct  software  system  testing 
procedures.  Requirements: 
Bachelor's  Degree,  educational 
or  functional  (3  years  experi- 
ence=1  year  of  college)  equiva¬ 
lent,  in  Engineering,  Computer 
Science,  Management 

Information  Systems  or  related 
field  and  two  years  experience  as 
a  software  engineer  or  computer 
programmer.  Working 

Conditions:  8:00  A.M.  to  5:00 
P.M.,  40  hours/week,  involves 
extensive  travel  and  frequent 
relocation.  Apply:  Elite  Careers, 
LLC,  1910  Cochran  Rd,  Manor 
Oak  2,  Suite  205,  Pittsburgh,  PA 
15220,  Attn:  Johanna  Dausch, 
Job  No  112707. 


IT  PROFESSIONALS 
MajescoMastek,  a  leading  soft¬ 
ware  consulting  company  head¬ 
quartered  in  Edison,  NJ,  seeks 
computer  professionals,  IT 
Business  Development 

Managers  and  IT  Project 
Managers.  For  our  computer- 
related  positions,  we  are  seeking 
Programmer/Analysts,  Systems 
Analysts/Business  Systems 
Analysts,  Network  Engineers  and 
Software  Developers,  Technical 
positions  require  a  Bachelor's 
degree  or  higher  in  a  related  field 
and/or  relevant  industry  experi¬ 
ence.  We  are  also  recruiting  for  IT 
Business  Development  and 
Account  Managers  to  manage 
existing  accounts  and  all  aspects 
of  sales/business  development 
for  the  company's  U.S.  opera¬ 
tions.  Qualified  applicants  will 
have  a  technical  and/or 
Marketing  degree  (Master's  pre¬ 
ferred)  and  relevant  industry 
experience.  For  our  IT  Project 
Manager  positions  we  prefer  a 
MS  degree  in  a  related  field  such 
as  Engineering  or  Computer 
Science  and  relevant  industry 
experience.  We  will  consider 
applicants  with  a  relevant 
Bachelor's  degree  and  significant 
industry  experience.  All  positions 
are  subject  to  relocations  to  vari¬ 
ous  sites  throughout  the  United 
States.  Qualified  applicants 
respond  by  mail  to:  HR 
Department,  MajescoMastek, 
105  Fieldcrest  Avenue,  Suite  208, 
Edison,  NJ  08837,  Please  specify 
position  applying  for  on  envelope. 


PROGRAMMER  ANALYST 
w/Bach  or  foreign  equiv  in 
Comp  Sci  or  Engg  or  Math  &  1 
yr  exp  to  research,  analyze, 
dsgn,  dvip,  test  &  impimt  com¬ 
ponents  using  Oracle 
eBusiness  Suite,  Workflow, 
RDBMS,  SQL,  PL/SQL, 
Developer  Suite,  Java,  XML, 
Win,  Unix  &  Linux.  Debug,  fix 
bug  &  test  various  issues  of 
ERP/CRM  s/ware  applies.  1  yr 
exp  as  Sr.  S/ware  Engr  accept¬ 
able.  Mail  res  to:  Vortalsoft  Inc, 
100  Davidson  Ave,  Ste  300, 
Somerset,  NJ  08873.  Job  Loc: 
Somerset,  NJ  or  in  any  unantic¬ 
ipated  Iocs  in  the  USA. 


Software  Engineer  for 
Menlo  Park  software  com¬ 
pany.  Must  have  BSc  in 
Comp  Sci  and  relevant 
experience.  Send  resumes 
to  dotFX,  Inc.  4400 
Bohannon  Drive,  SuitelOO 
Menlo  Park,  CA  94025  or 
email  to  jobs@dotFX.com. 


Citadel  Investment  Group  is 
seeking  a  Financial  Engineer  - 
Global  Markets,  Quantitative 
Strategies  in  Chicago,  IL. 
Responsible  for  architecting 
medium-scale  real-time  deriva¬ 
tive  trading  systems  across  mul¬ 
tiple  products,  functions,  &  tiers 
for  statistical  macro  trading. 
Provide  application  &  analytics 
support  to  the  statistical  fixed 
income,  currencies,  &  commodi¬ 
ties  quantitative  research  &  trad¬ 
ing.  Design  &  implement  real¬ 
time  market  data  infrastructure  & 
electronic  trading  platform. 
Apply  information  theory,  high- 
performance  computing,  &  com¬ 
munication  technology  towards 
system  analysis,  optimization,  & 
performance  improvement. 
Requirements  include  a 
Master's  degree  in  Computer 
Science,  Electrical  Engineering, 
Applied  Mathematics,  or  a  relat¬ 
ed  quantitative  field,  or  a  foreign 
equivalent,  plus  2  years  of 
research  or  industry  experience 
in  high-performance  computing 
&  communications  technologies 
or  software  design  &  develop¬ 
ment.  Must  have  2  years  of 
C++/STL  experience  in  a 
Unix/Linux  or  Windows  environ¬ 
ment.  Must  have  experience 
with  Matlab  &  SQL;  multi-thread¬ 
ed  programming  experience  & 
design  patterns  knowledge;  & 
knowledge  of  probability  theory, 
stochastic  processes,  informa¬ 
tion  theory  &  their  potential 
application  in  finance.  Qualified 
candidates  should  submit  a 
cover  letter  and  resume, 
job  reference  R-0085,  to: 
itjobs0085@cltadelgroup.com 
Principals  only  need  apply. 


COMPUTER  &  INFORMATION 
SYSTEMS  MANAGER 

w/Masters*  or  foreign  equiv  in 
Comp  Sci  or  Engg  or  Math  &  1 
yr  exp  to  plan,  organize,  direct 
&  coord.  MS  technologies 
based  s/ware  dvipmt  projects. 
Dsgn,  dvip  &  create  s/ware 
applies  using  industry's  stan¬ 
dard  OOA&D  techniques, 
SDLC  principles  &  S/ware  Dsgn 
Patterns.  Dvip,  dsgn,  code  & 
test  projects  using  Java,  JSP 
J2EE,  Oracle,  Wepsphere, 
XML,  SQL  Server.  Gather  sys¬ 
tems  reqmts  from  clients  & 
translate  in  the  form  of  UML  dia¬ 
grams  &  RUP  documents.  Dvip, 
maintain  &  track  comprehen¬ 
sive  project  plans  using  MS 
Project.  Supv  2  Prgmr  Analyst. 
Mail  res  to:  Mascon  Global 
Consulting  Inc.,  220  Old  New 
Brunswick  Rd,  Ste  #101 
Piscataway,  NJ  08854.  Ref 
#002.  Job  Loc:  Piscataway,  NJ 
or  in  any  unanticipated  Iocs  in 
the  USA 


VICE  PRESIDENT. 

WORLDWIDE  BUSINESS 

DEVELOPMENT 

for  Acme  Packet,  Inc.'s 
Burlington,  MA  location.  Direct 
Acme  Packet's  regional  Business 
Development  (BD)  organizations 
and  evaluate  team  performance. 
Budget  responsibility.  Liaison  for 
Executive  Management/legal 
counsel  on  contractual 
terms/conditions.  Identify  new 
resale  partners.  Develop  strate¬ 
gic  plans  to  expand  business  in 
new  regions/markets/technolo¬ 
gies  and  increase  profit/sales. 
Assist  in  preparation  of  sales 
plans  and  manage  business  to 
meet  sales  plans.  Minimum 
Requirements:  Master's  degree 
in  Electrical  or  Electronics 
Engineering  (or  foreign  equiva¬ 
lent)  OR  Employer  will  accept 
Bachelor's  degree  In  Electrical  or 
Electronics  Engineering  (or  for¬ 
eign  equivalent)  plus  five  years  of 
progressively  more  responsible 
work  in  marketing/sales  field  for 
Vol  P/telephony  industry,  plus  two 
years  of  managerial  sales/mar¬ 
keting  experience  in  VolP/tele- 
phony  industry.  Experience  must 
include:  sales  and  marketing 
VolP/telephony  products;  identify¬ 
ing/vetting  and  managing  distrib- 
ution/partners/manufacturers/ven 
dors;  managing  technical/sales 
development  teams;  negotiating 
contractual  terms/conditions; 
budget  responsibility  and  meeting 
quarterly  sales  targets/quotas: 
and  maintaining  relationships  w/ 
international  product/sales 
groups  and  executive  teams.  Mail 
resumes  with  cover  letters  to: 
Susan  Anderson,  Acme  Packet, 
Inc.,  71  Third  Avenue,  Burlington, 
MA  01803. 


SOFTWARE  QUALITY 
ASSURANCE  ENGINEER 

for  Acme  Packet,  Inc.'s 
Burlington,  MA  location. 
Functional  testing  of  software 
features  for  VoIP  protocols. 
System  configuration  manage¬ 
ment  and  testing  of  compo¬ 
nents  to  identify  scale,  perfor¬ 
mance  and  stability  of  code 
releases.  Development/imple¬ 
mentation  of  test  strategies/ 
plans.  Test  automation. 
Minimum  Requirements: 
Master's  degree  (or  foreign 
equivalent)  in  Electrical 
Engineering  plus  two  years 
experience  in  software  testing 
and  telecommunications. 
Experience  must  include: 
Unix/Linux;  networking  proto¬ 
cols  (TCP/IP);  VoIP  protocols 
(SS7,  SIP,  RTP/RTCP, 
MGCP/SIGTRAN);  wireless 
network  architecture  design¬ 
ing/planning  (GSM/UMTS/ 
IMS).  Mail  resumes  with  cover 
letters  to:  Susan  Anderson, 
Acme  Packet,  Inc.,  71  Third 
Avenue,  Burlington,  MA01803. 
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TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


Problem,  Defined 

Internet  filter  is  installed  at 
this  site,  and  in  the  beginning, 
there  are  complaints  from 
users  who  can’t  get  to  their 
favorite  nonbusiness  sites. 
But  after  six  months  and  lots 
of  explanations  to  users,  the 
complaints  have  stopped. 
“Then  one  Saturday  evening, 
a  user  called  me,”  says  an 
IT  pilot  hsh  working  there. 

“He  called  to  report  that 
something  must  be  wrong, 
because  he  could  get  to  his 
lottery  numbers  tonight.  I 
told  him  thanks,  and  that  I 
would  inform  the  individual  in 
charge  of  the  filter  on  Monday 
morning,  as  it  wasn’t  stopping 
anything  production-critical 
during  the  weekend  hours. 

I  still  can’t  decide  which  is 


funnier:  the  fact  that  appar¬ 
ently  every  day  for  nearly  six 
months  this  user  tried  to  get 
to  his  lottery  numbers  even 
though  the  page  should  have 
never  loaded  again  -  or  that, 
when  he  actually  was  able  to, 
he  reported  it  as  a  problem.” 

Secure,  Defined 

There’s  a  break-in  at  this  site, 
and  fortunately  there  are 
high-tech  security  cameras 
in  place  that  may  have  a  good 
picture  of  the  perps.  But  when 
the  police  ask  to  see  the  foot¬ 
age,  there’s  a  problem:  No 
one  seems  to  know  how  to  get 
access  to  that  stored  video. 
“Management  had  decided 
that  no  one  would  ever  want 
to  see  the  video,  so  no  moni¬ 
tor  or  software  is  included,” 


groans  an  insider  pilot  fish. 
“The  system  supplier  has 
been  offended  by  other  things 
that  have  occurred  and  will 
not  help,  so  we’re  pleading 
with  the  manufacturer  to  help 
us  get  the  video  from  the  very 
proprietary  system.  We’re 
now  working  on  attempt 
No.  4  to  get  hies  viewed  so 
police  have  a  shot  at  seeing 
who  did  what.  At  this  point, 
it  doesn’t  look  like  we’re  ever 
going  to  know.” 

Undefined 

User  calls  pilot  hsh  with  pass¬ 
word  problems;  hsh  resets 
user’s  password  and  hangs 
up.  Simple  enough,  right?  But 
user  soon  calls  back.  “When 
he  logs  in  for  the  hrst  time,  the 
system  prompts  him  to  change 
his  password,”  says  hsh.  “He 
tries,  but  it  always  fails  with  a 
message  that  says,  ‘Password 
can’t  contain  consecutive 
characters.’  I  explain  that 
what  that  is  saying  is  he  can’t 
use  the  same  character  twice, 
like  HH."  This  time,  hsh  stays 


on  the  line  as  user  tries  again. 
After  10  minutes  and  many 
failures,  he  asks  user  exactly 
what  the  problem  password 
is.  “The  password  ends  with 
‘2001,’  ”  sighs  hsh.  “I  explain 
the  problem,  and  the  user 
says,  ‘If  you  had  told  me  that 
in  the  hrst  place,  I  wouldn’t  be 
having  all  these  problems.  All 
you  told  me  is  I  couldn’t  use 
HH.  You  never  said  anything 
about  not  using  00'  I  guess  it 
was  all  my  fault  for  not  giving 
him  enough  information.” 

■  Sharky  wants  more  than 
enough  information  about 
your  true  tale  of  IT  life. 

Send  it  to  me  at  sharky@ 
computerworld.com,  and 
Til  send  you  a  stylish  Shark 
shirt  if  I  use  it. 

[  COMPUTEBWORLDXOM^^^ 

O  DO  YOU  LOVE  SHARK  TANK? 

Then  you  might  like  Shark  Bait.  _ ^ 

Dive  in  and  dish  the  dirt 
with  like-minded  IT  pros:  ^ 

sharkbait.computerworld.com. 

O  CHECK  OUT  Sharky’s  blog,  browse  the 
I  Sharkives  and  sign  up  for  Shark  Tank  home 
delivery  at  computerworld.com/sharky. 
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H  FRANKLY  SPEAKING 


Merrill  LYNCH  says  we’re  already  in  a  reces¬ 
sion.  Is  that  relevant?  Morgan  Stanley  and  Gold¬ 
man  Sachs  say  a  U.S.  recession  this  year  is  now 
unavoidable.  Is  that  relevant? 

Here’s  what’s  relevant:  Whether  they’re  right  or  not,  you 
need  a  plan.  And  you  need  to  start  working  on  it  right  now. 


;  Last  Monday,  Mer- 
\  rill  Lynch’s  chief  North 
!  American  economist, 

I  David  Rosenberg,  issued 
!  a  research  note  to  clients 
}  saying  a  recession  has  al- 
;  ready  arrived.  Rosenberg 
I  cited  rising  unemploy- 
1  ment  and  energy  costs,  a 
'  collapsing  housing  market 
j  and  dwindling  consumer 
;  confidence  —  the  usual 
I  suspects. 

I  Meanwhile,  Morgan 
I  Stanley  economists  Rich- 
j  ard  Berner  and  David 
j  Greenlaw  issued  their 
i  own  research  note  last 
!  week,  predicting  a  mild 
I  recession  in  the  first  half 
I  of  2008.  And  Goldman 
[  Sachs  economist  Jan 
I  Hatzius  predicted  late  last 
I  year  that  a  recession  in 
1  the  U.S.  was  on  the  way. 
j  Pretty  scary,  huh? 

;  First,  let’s  get  the  word 
!  out  of  the  way.  Recession. 

1  Recession.  Recession.  Feel 
I  better?  Feel  worse?  Who 
cares?  The  economic  facts 
;  on  the  ground  remain  the 
'  same,  no  matter  what  la¬ 
bel  is  slapped  on  them  by 
!  any  economist,  politician 
or  pundit. 


Recession  or  not? 

That’s  irrelevant  to  you. 
You  need  a  plan  based 
on  facts,  not  frightening 
words.  Start  collecting 
them. 

■  Know  your  CEO.  Does 
your  CEO  trust  you 
enough  to  be  candid?  If  so, 
talk  to  him.  Otherwise,  do 
some  research.  How  has 
this  executive  reacted  in 
the  past  to  a  tighter  busi¬ 
ness  environment  —  by 
shrinking  or  by  attacking 
competitors? 

■  Know  your  business. 
Real  estate  is  getting 
ugly,  but  discount  re¬ 
tail  may  benefit.  Some 
banks  are  overextended; 
others  see  opportunity. 
Merrill  Lynch’s  Rosen¬ 
berg  predicts  consumer 
discretionary  spending, 

■  Recession 
or  not?  That’s 
irrelevant.  You 
need  a  plan 
based  on  facts, 
not  frightening 
words.  Start 
collecting  them. 


financials  and  (gulp)  tech 
will  be  pummeled  badly; 
telecom,  health  care  and 
utilities  have  the  least 
downside  risk.  How  hard 
will  your  company’s  cus¬ 
tomers  be  hit? 

■  Know  your  supply 
chain.  Who’s  solid?  Who’s 
shaky?  Who’s  likely  to  cut 
back  on  the  ability  to  work 
with  your  IT  initiatives? 
And  downstream,  which 
big  customers  are  likely  to 
make  demands  on  your  IT 
capabilities? 

■  Know  your  IT  shop. 

You  have  a  portfolio  of 
projects,  which  ones  are 
bogged  down?  Which 
have  lost  meaningful  sup¬ 
port  from  their  business 
sponsors?  Where  will  you 
redeploy  those  analysts 
and  developers? 

You  have  a  collection 
of  technologies.  What  fits 
your  future  plans?  What 
doesn’t  but  will  cost  more 
to  replace  than  you  want 
to  spend  right  now?  What 
will  you  need  to  add  if 
your  company  swallows  a 
competitor  or  launches  a 
market-share  grab? 

You  have  a  staff  of  IT 
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professionals.  When  push 
comes  to  shove,  you  want 
to  maximize  the  value  of 
those  assets,  not  just  cut 
head  count.  How  will  you 
keep  the  people  you  need? 
How  will  you  find  the  new 
expertise  you’ll  require? 

But  wait,  you  might 
be  thinking  —  is  there  a 
recession  going  on?  And 
if  there’s  not,  why  ask  all 
these  questions  and  build 
a  plan  now? 

Because  right  now 
nobody’s  pounding  on 
your  door.  Because  it’s  not 
a  crisis  —  yet. 

Look,  usually  the  times 
you  ask  these  questions 
are  in  the  middle  of  a  cri¬ 
sis  (or  during  budgeting, 
which  is  just  a  crisis  that’s 
scheduled  annually). 

But  you’re  not  in  crisis 
mode  now.  With  no  one 
breathing  down  your 
neck,  you  can  collect 
more  than  just  the  bare 
facts.  You  can  ask  your 
people  more  questions 
and  get  better  answers. 
You  can  revisit  decisions 
and  second-guess  your 
own  analysis.  You  can 
research  and  consult  and 
back  up. 

This  is  the  time  you’ll 
wish  you  had  when  the 
crisis  hits. 

Use  it  wisely.  Make 
the  plan  for  your  IT  shop 
based  on  what’s  relevant 
to  you. 

That’s  the  R  word  that 
matters.  ■ 

Frank  Hayes  is  Computer- 
world’s  senior  news 
columnist.  Contact  him 
at  frank_hayes@ 
computerworld.com. 


Innovations  by  InterSystems 


Embed  the  ability  to  connect. 


For  software  developers  seeking  competitive  advantages,  InterSystems  Ensemble® 
offers  an  easy  way  to  make  applications  more  valuable.  Embed  our  rapid  integration 
platform  in  your  applications,  and  they  will  easily  connect  with  the  existing  systems 
of  your  customers  and  prospects.  Plus,  Ensemble  enables  you  to  enrich  legacy 
applications  with  adaptable  workflow,  browser-based  user 
interfaces,  rules-based  business  processes,  and  other  new 
features  that  users  want  -  without  rewriting.  Embed  our 
innovations,  enrich  your  applications. 

Make 
Applications 

More 

Valuable 

See  a  demonstration  of  Ensemble  at  InterSystems.com/Ensemble25A 


InterSystems 

ENSEMBLE 


C  2007  InterSystems  (xsrpcM-ation.  All  rights  reserved.  InterSystems  Ensemble  is  a  registered  uademark  of  ImcrSyslcms  Corporation.  10-07  EmbedEns25  Co\Vo 
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THE  NEW  DELL  MD3000I 

•  40%  less  cost  than  the  IBM  DS3300 

•  Designed  specifically  for  small  and  medium  businesses 

•  Simpler  deployment  and  management  for  non-IT  experts 

•  Utilizes  existing  Ethernet  network 

•  Scales  up  to  18TB -without  hidden  charges 

•  No  confusing  licensing  schemes 


STORAGE  IBM  CAN’T  BEAT 


LEARN  HOW  DELL  SIMPLIFIES  STORAGE  AT 
DELL.COM/Manage  or  call  866.260.DELL 


